# depsguard mit Homebrew, winget installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für depsguard in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:depsguard
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install depsguard
```

  Evidenz: local Homebrew formula metadata

### Windows

- winget (92%):

```sh
winget install --id Arnica.DepsGuard -e
```

  Evidenz: Windows Package Manager source index: Arnica.DepsGuard from https://cdn.winget.microsoft.com/cache/source.msix

## Paketfakten

- **Paketschlüssel:** brew:depsguard
- **Paketmanager:** Homebrew
- **Version:** 0.1.40
- **Quellzusammenfassung:** Harden package manager configs against supply chain attacks
- **Homepage:** <https://depsguard.com>
- **Repository:** <https://github.com/arnica/depsguard>
- **Zuletzt aktualisiert:** 2026-06-30T21:29:11Z
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- depsguard (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 0.1.40
## Projektgeschichte und Nutzung

DepsGuard is a young supply-chain hardening CLI that scans package-manager and dependency-bot configuration files for safer defaults. It focuses on release cooldowns, install-script risk, provenance-related settings, and other package-manager knobs that reduce exposure to dependency confusion and malicious fresh releases.

### Projektgeschichte

The official arnica/depsguard repository was created in 2026. The README presents DepsGuard as a single static Rust binary with no third-party Rust crate dependencies, built to scan npm, pnpm, yarn, bun, uv, pip, poetry, aube, Renovate, and Dependabot configs.

The project website and README emphasize interactive scanning and fixing: DepsGuard reads known config locations, compares settings to recommended supply-chain defaults, previews diffs, writes backups, and can restore changes.

### Adoptionsgeschichte

Because DepsGuard is new, its official adoption record is still mostly packaging and distribution: prebuilt GitHub release binaries, Homebrew core, APT setup, crates.io, WinGet, and Scoop. That packaging breadth suggests the tool is meant for developer workstations as much as CI hardening checks.

### Wie es verwendet wird

Users can run `depsguard` for an interactive TUI, `depsguard scan` for read-only reporting, or `depsguard restore` to roll back from backups. The tool searches user-level and repo-level package-manager configuration files, including `.github/dependabot.yml` and Renovate files, and only edits files after user approval.

### Warum Paket-Nerds sich dafür interessieren

For package nerds, DepsGuard is notable because it packages a cross-ecosystem security checklist into one binary. Its config table is a snapshot of how many different package managers have grown similar but incompatible concepts for cooldowns, script blocking, trust policy, and registry hardening.

### Zeitleiste

- 2026: Official arnica/depsguard repository created.
- 2026: README documents Homebrew core, APT, crates.io, WinGet, and Scoop installation channels.
- 2026: Website describes DepsGuard as a one-command scanner and fixer for package-manager security settings.

### Related projects

- Related configuration surfaces include npm, pnpm, Yarn, Bun, uv, pip, Poetry, aube, Renovate, and Dependabot.

### Quellen

- <https://depsguard.com/>
- <https://github.com/arnica/depsguard#readme>
- <https://api.github.com/repos/arnica/depsguard>


## Sicherheitshinweise

Für depsguard wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Linux: ~/.npmrc, ~/.config/pnpm/rc, ~/.config/pnpm/config.yaml, ~/.yarnrc.yml, $XDG_CONFIG_HOME/.bunfig.toml, ~/.config/uv/uv.toml, ~/.config/pip/pip.conf, ~/.config/pypoetry/config.toml
- macOS: ~/.npmrc, ~/Library/Preferences/pnpm/rc, ~/Library/Preferences/pnpm/config.yaml, ~/.yarnrc.yml, ~/.bunfig.toml, ~/.config/uv/uv.toml, ~/Library/Application Support/pip/pip.conf, ~/Library/Application Support/pypoetry/config.toml
- Windows: %LOCALAPPDATA%\pnpm\config\rc, %LOCALAPPDATA%\pnpm\config\config.yaml, %APPDATA%\uv\uv.toml, %APPDATA%\pip\pip.ini, %APPDATA%\pypoetry\config.toml
## Andere Paketmanager-Einträge

- winget - Arnica.DepsGuard: normalized package name match | Windows Package Manager source index: Arnica.DepsGuard from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/depsguard.yml](https://github.com/mxcl/pkgdb/blob/main/combined/depsguard.yml)


## Quellen

- pkg.so package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph