pkg.soopen package index

brew / Rang 1522

pdm mit Homebrew, Nix, apt installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für pdm in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install pdm

local Homebrew formula metadata

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#pdm

nixpkgs package indexes · pkgs/by-name/pd/pdm/package.nix · Quelle: api.github.com

Debian aptverifiziert · 92%
sudo apt install python3-pdm

Debian stable package indexes · python3-pdm · Quelle: deb.debian.org

Überblick

Paketzusammenfassung

Modern Python package and dependency manager supporting the latest PEP standards

Befehle und Aliase

  • pdm

Verlauf

Projektgeschichte und Nutzung

PDM is a Python package and project manager that manages dependencies, lockfiles, environments, scripts, builds, and publishing through modern Python packaging standards.

Projektgeschichte

PDM was created around support for PEP 582's project-local `__pypackages__` layout. The project expanded beyond that origin into a full Python project and dependency manager supporting current packaging standards.

The 0.12 release line in late 2020 improved `pdm run`, exporting, Windows PEP 582 integration, and lockfile metadata. Version 1.0 followed in January 2021. Later development made virtual environments the default, broadened dependency groups, publishing, workspaces, interpreter management, and lock strategies, and introduced experimental use of uv as a resolver and installer.

Adoptionsgeschichte

PDM gained adoption as Python packaging moved toward `pyproject.toml`, standardized build interfaces, declarative metadata, and lockfile-based workflows. The supplied mappings record packages in Homebrew, Debian, and Nix.

Its continued support for both virtual environments and the PEP 582 `__pypackages__` layout helped distinguish it early on. After PEP 582 was rejected, PDM retained that mode as an opt-in feature while making conventional virtual environments the recommended default.

Wie es verwendet wird

A typical workflow begins with `pdm new` or `pdm init`, adds dependencies with `pdm add`, records exact resolutions in `pdm.lock`, installs or synchronizes an environment with `pdm install` or `pdm sync`, and runs project commands with `pdm run`.

Library maintainers can build and upload distributions with PDM's build and publish commands. Teams generally commit `pdm.lock` when they want development and CI to reproduce the same resolution.

Warum Paket-Nerds sich dafür interessieren

PDM is significant in Python package-manager culture because it combined standards-oriented project metadata, dependency resolution, locking, environment management, script execution, building, and publishing in one CLI.

Its history captures a transitional period in Python packaging: enthusiasm for PEP 582, consolidation around `pyproject.toml`, greater use of reproducible lockfiles, and later cooperation with high-performance tooling such as uv.

Zeitleiste

  • 2020: The 0.12 release line expanded scripts, exporting, PEP 582 integration, and lockfile handling.
  • 2021-01-05: PDM 1.0.0 was released.
  • 2023: Virtual environments were established as the recommended mode after PEP 582's rejection.
  • 2025: PDM documented experimental uv-backed resolution and installation.

Related projects

  • PEP 582 supplied PDM's original project-local package-layout idea, although the proposal was later rejected.
  • PDM can use uv experimentally as its resolver and installer.
  • Python packaging standards such as PEP 517, PEP 518, and PEP 621 underpin its build and project-metadata workflows.

Sicherheitslage

Risikostufe: orange

infrastructure mutation or orchestration signal.

Risikoklassifikator

orange Risiko · mittel Konfidenz · infrastructure

Warum

  • infrastructure mutation or orchestration signal

Signale

  • text:dependency manager

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 5 Plattformziele verfügbar.
  • Installiert mit 2 Laufzeitabhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Linux
<PROJECT_ROOT>/pdm.toml$XDG_CONFIG_HOME/pdm/config.toml~/.config/pdm/config.toml$XDG_CONFIG_DIRS/pdm/config.toml/etc/xdg/pdm/config.toml$XDG_CONFIG_HOME/pdm/global-project/pdm.toml
macOS
<PROJECT_ROOT>/pdm.toml~/Library/Application Support/pdm/config.toml/Library/Application Support/pdm/config.toml~/Library/Application Support/pdm/global-project/pdm.toml
Windows
<PROJECT_ROOT>\pdm.toml%USERPROFILE%\AppData\Local\pdm\pdm\config.toml%ProgramData%\pdm\pdm\config.toml%USERPROFILE%\AppData\Local\pdm\pdm\global-project\pdm.toml

Credential files

Credential-bearing paths to review before unattended agent runs.

Linux
$XDG_CONFIG_HOME/pdm/config.toml~/.config/pdm/config.toml
macOS
~/Library/Application Support/pdm/config.toml
Windows
%USERPROFILE%\AppData\Local\pdm\pdm\config.toml

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
pdmcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-11-04
Manager-Version2.29.5
Manager aktualisiert2026-10-31
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://pdm-project.org

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:pdm
Version2.29.5
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/pdm
Homepagehttps://pdm-project.org
Repositoryhttps://github.com/pdm-project/pdm
Upstream-Dokumentationhttps://pdm-project.org
LizenzMIT
Quellarchivhttps://files.pythonhosted.org/packages/81/a0/ebcb4bf939e3c1bba9fcb698ec8237868bdb9402461682baced71325e020/pdm-2.29.5.tar.gz
Zuletzt aktualisiert2026-10-31T06:04:35Z
Pulseupdated
Abhängigkeitencertifi, python@3.15
Bottleverfügbar (auf arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namepdm
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Debian apt95%

python3-pdm 2.20.1+ds1-2

next generation Python package management tool

https://github.com/pdm-project/pdm

sudo apt install python3-pdm
  • Section: python
  • Architecture: all
  • Source Package: pdm
  • 27 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Pdm
Debian stable package indexes · deb.debian.org · Debian stable package indexes: python3-pdm from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

pdm

nix profile install nixpkgs#pdm
  • normalized package name match
  • Abgeglichen nach: Pdm
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/pd/pdm/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation