pkg.soopen package index

brew / Rang 5690

shadowenv mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für shadowenv in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install shadowenv

local Homebrew formula metadata

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#shadowenv

nixpkgs package indexes · pkgs/by-name/sh/shadowenv/package.nix · Quelle: api.github.com

Überblick

Paketzusammenfassung

Reversible directory-local environment variable manipulations

Befehle und Aliase

  • shadowenv

Verlauf

Projektgeschichte und Nutzung

Shadowenv is Shopify's reversible directory-local environment manager. Trusted Shadowlisp files modify environment variables when a user enters a project and the previous values are restored when the user leaves.

Projektgeschichte

Shopify developed Shadowenv as a project-local environment-variable shadowing tool. It scans a directory and its ancestors for `.shadowenv.d` directories, evaluates trusted Shadowlisp programs, applies their environment changes on entry, and restores the prior environment on exit.

Adoptionsgeschichte

The official documentation describes use at Shopify and installation through Homebrew on macOS. Its documented integrations and non-interactive `shadowenv exec` mode extend the same directory-local environment model beyond interactive shells.

Wie es verwendet wird

Users install a shell hook for Bash, Zsh, or Fish, place numbered `.lisp` programs under `.shadowenv.d`, and run `shadowenv trust` before loading them. `shadowenv exec -- <command>` applies the environment to non-interactive commands.

Warum Paket-Nerds sich dafür interessieren

Shadowenv occupies the same package-nerd niche as directory-aware environment tools while emphasizing reversibility and explicit trust. Its small Shadowlisp programs make environment changes composable, and its signature-based trust mechanism addresses the risk of executing project-local code merely by changing directories.

Zeitleiste

  • 2019: The documented build process used the Rust nightly toolchain dated 2018-12-26, reflecting the project's early Rust implementation.
  • Public project era: Shopify published Shadowenv's source and documentation for external use.

Related projects

  • Shadowenv belongs to the broader family of directory-local development-environment tools and shell hooks. Its official documentation also describes editor integrations and Shopify's internal `dev` tooling.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
.shadowenv.d/*.lisp

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.config/shadowenv/trust-key

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
shadowenvcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-09-19
Manager-Version3.5.1
Manager aktualisiert2026-09-14
lokale DatenOK
Upstreamaktuell
neueste erkannte Version3.5.1

https://github.com/Shopify/shadowenv

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:shadowenv
Version3.5.1
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/shadowenv
Homepagehttps://shopify.github.io/shadowenv/
Repositoryhttps://github.com/Shopify/shadowenv
Upstream-Dokumentationhttps://shopify.github.io/shadowenv/
LizenzMIT
Quellarchivhttps://github.com/Shopify/shadowenv/archive/refs/tags/3.5.1.tar.gz
Zuletzt aktualisiert2026-09-14T12:21:27+02:00
Pulseupdated
Build-Abhängigkeitenrust
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameshadowenv
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

shadowenv

nix profile install nixpkgs#shadowenv
  • normalized package name match
  • Abgeglichen nach: Shadowenv
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sh/shadowenv/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • rustBuild dependency declared by Homebrew.

Gleicher Workflow

  • direnvShares pkgdb curated category or tags: cli, developer-tools, environment-management, environment-variables, shell.
  • modulesShares pkgdb curated category or tags: cli, developer-tools, environment-management, shell.
  • envelopeShares pkgdb curated category or tags: cli, developer-tools, environment-management, environment-variables.
  • pyenv-virtualenvShares pkgdb curated category or tags: cli, developer-tools, environment-management.
  • pyenv-virtualenvwrapperShares pkgdb curated category or tags: cli, developer-tools, environment-management.
  • pyenv-pip-migrateShares pkgdb curated category or tags: cli, developer-tools, environment-management.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation