# depsguard を Homebrew, winget でインストール

depsguard のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:depsguard
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install depsguard
```

  証拠: local Homebrew formula metadata

### Windows

- winget (92%):

```sh
winget install --id Arnica.DepsGuard -e
```

  証拠: Windows Package Manager source index: Arnica.DepsGuard from https://cdn.winget.microsoft.com/cache/source.msix

## パッケージ情報

- **パッケージキー:** brew:depsguard
- **パッケージマネージャ:** Homebrew
- **バージョン:** 0.1.40
- **ソース概要:** Harden package manager configs against supply chain attacks
- **ホームページ:** <https://depsguard.com>
- **リポジトリ:** <https://github.com/arnica/depsguard>
- **最終更新:** 2026-06-30T21:29:11Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- depsguard (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 0.1.40
## プロジェクトの歴史と使われ方

DepsGuard is a young supply-chain hardening CLI that scans package-manager and dependency-bot configuration files for safer defaults. It focuses on release cooldowns, install-script risk, provenance-related settings, and other package-manager knobs that reduce exposure to dependency confusion and malicious fresh releases.

### プロジェクトの歴史

The official arnica/depsguard repository was created in 2026. The README presents DepsGuard as a single static Rust binary with no third-party Rust crate dependencies, built to scan npm, pnpm, yarn, bun, uv, pip, poetry, aube, Renovate, and Dependabot configs.

The project website and README emphasize interactive scanning and fixing: DepsGuard reads known config locations, compares settings to recommended supply-chain defaults, previews diffs, writes backups, and can restore changes.

### 採用の歴史

Because DepsGuard is new, its official adoption record is still mostly packaging and distribution: prebuilt GitHub release binaries, Homebrew core, APT setup, crates.io, WinGet, and Scoop. That packaging breadth suggests the tool is meant for developer workstations as much as CI hardening checks.

### 使われ方

Users can run `depsguard` for an interactive TUI, `depsguard scan` for read-only reporting, or `depsguard restore` to roll back from backups. The tool searches user-level and repo-level package-manager configuration files, including `.github/dependabot.yml` and Renovate files, and only edits files after user approval.

### パッケージ好きにとっての重要性

For package nerds, DepsGuard is notable because it packages a cross-ecosystem security checklist into one binary. Its config table is a snapshot of how many different package managers have grown similar but incompatible concepts for cooldowns, script blocking, trust policy, and registry hardening.

### タイムライン

- 2026: Official arnica/depsguard repository created.
- 2026: README documents Homebrew core, APT, crates.io, WinGet, and Scoop installation channels.
- 2026: Website describes DepsGuard as a one-command scanner and fixer for package-manager security settings.

### Related projects

- Related configuration surfaces include npm, pnpm, Yarn, Bun, uv, pip, Poetry, aube, Renovate, and Dependabot.

### ソース

- <https://depsguard.com/>
- <https://github.com/arnica/depsguard#readme>
- <https://api.github.com/repos/arnica/depsguard>


## セキュリティノート

depsguard に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Linux: ~/.npmrc, ~/.config/pnpm/rc, ~/.config/pnpm/config.yaml, ~/.yarnrc.yml, $XDG_CONFIG_HOME/.bunfig.toml, ~/.config/uv/uv.toml, ~/.config/pip/pip.conf, ~/.config/pypoetry/config.toml
- macOS: ~/.npmrc, ~/Library/Preferences/pnpm/rc, ~/Library/Preferences/pnpm/config.yaml, ~/.yarnrc.yml, ~/.bunfig.toml, ~/.config/uv/uv.toml, ~/Library/Application Support/pip/pip.conf, ~/Library/Application Support/pypoetry/config.toml
- Windows: %LOCALAPPDATA%\pnpm\config\rc, %LOCALAPPDATA%\pnpm\config\config.yaml, %APPDATA%\uv\uv.toml, %APPDATA%\pip\pip.ini, %APPDATA%\pypoetry\config.toml
## 他のパッケージマネージャ記録

- winget - Arnica.DepsGuard: normalized package name match | Windows Package Manager source index: Arnica.DepsGuard from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/depsguard.yml](https://github.com/mxcl/pkgdb/blob/main/combined/depsguard.yml)


## ソース

- pkg.so package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph