# Installer depsguard avec Homebrew, winget

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de depsguard pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:depsguard
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install depsguard
```

  Preuve: local Homebrew formula metadata

### Windows

- winget (92%):

```sh
winget install --id Arnica.DepsGuard -e
```

  Preuve: Windows Package Manager source index: Arnica.DepsGuard from https://cdn.winget.microsoft.com/cache/source.msix

## Faits du paquet

- **Clé du paquet:** brew:depsguard
- **Gestionnaire de paquets:** Homebrew
- **Version:** 0.1.40
- **Résumé source:** Harden package manager configs against supply chain attacks
- **Page d'accueil:** <https://depsguard.com>
- **Dépôt:** <https://github.com/arnica/depsguard>
- **Dernière mise à jour:** 2026-06-30T21:29:11Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- depsguard (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 0.1.40
## Historique du projet et usages

DepsGuard is a young supply-chain hardening CLI that scans package-manager and dependency-bot configuration files for safer defaults. It focuses on release cooldowns, install-script risk, provenance-related settings, and other package-manager knobs that reduce exposure to dependency confusion and malicious fresh releases.

### Historique du projet

The official arnica/depsguard repository was created in 2026. The README presents DepsGuard as a single static Rust binary with no third-party Rust crate dependencies, built to scan npm, pnpm, yarn, bun, uv, pip, poetry, aube, Renovate, and Dependabot configs.

The project website and README emphasize interactive scanning and fixing: DepsGuard reads known config locations, compares settings to recommended supply-chain defaults, previews diffs, writes backups, and can restore changes.

### Historique d'adoption

Because DepsGuard is new, its official adoption record is still mostly packaging and distribution: prebuilt GitHub release binaries, Homebrew core, APT setup, crates.io, WinGet, and Scoop. That packaging breadth suggests the tool is meant for developer workstations as much as CI hardening checks.

### Modes d'utilisation

Users can run `depsguard` for an interactive TUI, `depsguard scan` for read-only reporting, or `depsguard restore` to roll back from backups. The tool searches user-level and repo-level package-manager configuration files, including `.github/dependabot.yml` and Renovate files, and only edits files after user approval.

### Pourquoi les passionnés de paquets s'y intéressent

For package nerds, DepsGuard is notable because it packages a cross-ecosystem security checklist into one binary. Its config table is a snapshot of how many different package managers have grown similar but incompatible concepts for cooldowns, script blocking, trust policy, and registry hardening.

### Chronologie

- 2026: Official arnica/depsguard repository created.
- 2026: README documents Homebrew core, APT, crates.io, WinGet, and Scoop installation channels.
- 2026: Website describes DepsGuard as a one-command scanner and fixer for package-manager security settings.

### Related projects

- Related configuration surfaces include npm, pnpm, Yarn, Bun, uv, pip, Poetry, aube, Renovate, and Dependabot.

### Sources

- <https://depsguard.com/>
- <https://github.com/arnica/depsguard#readme>
- <https://api.github.com/repos/arnica/depsguard>


## Notes de sécurité

Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour depsguard. Les métadonnées de paquet Nucleus restent publiées ici afin que la couverture future dispose d'une URL stable.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Linux: ~/.npmrc, ~/.config/pnpm/rc, ~/.config/pnpm/config.yaml, ~/.yarnrc.yml, $XDG_CONFIG_HOME/.bunfig.toml, ~/.config/uv/uv.toml, ~/.config/pip/pip.conf, ~/.config/pypoetry/config.toml
- macOS: ~/.npmrc, ~/Library/Preferences/pnpm/rc, ~/Library/Preferences/pnpm/config.yaml, ~/.yarnrc.yml, ~/.bunfig.toml, ~/.config/uv/uv.toml, ~/Library/Application Support/pip/pip.conf, ~/Library/Application Support/pypoetry/config.toml
- Windows: %LOCALAPPDATA%\pnpm\config\rc, %LOCALAPPDATA%\pnpm\config\config.yaml, %APPDATA%\uv\uv.toml, %APPDATA%\pip\pip.ini, %APPDATA%\pypoetry\config.toml
## Autres enregistrements de gestionnaires de paquets

- winget - Arnica.DepsGuard: normalized package name match | Windows Package Manager source index: Arnica.DepsGuard from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/depsguard.yml](https://github.com/mxcl/pkgdb/blob/main/combined/depsguard.yml)


## Sources

- pkg.so package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph