pkg.sopackage field notes

brew / rank 344

Install atuin with Homebrew

Improved shell history for zsh, bash, fish and nushell. Version 18.18.1 via Homebrew; verified 2026-07-28.

agent safety

Agent safety answer

atuin stores and syncs shell history, which may include sensitive commands.

Credential access

Reads shell history, sync tokens, and command text that may contain secrets.

Remote mutation

Can sync history to remote storage and change account state.

Publish/artifact risk

Can publish sensitive command history to a sync backend.

Recommended control

Gate sync, import, and commands that expose stored history.

Agent-use guidance

Allow local search cautiously; require approval before sync or history export.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install atuin

provider-native install command

overview

Package summary

Improved shell history for zsh, bash, fish and nushell

Commands and aliases

  • atuin

history

Project history and usage

Atuin is a shell-history replacement that records commands in a local SQLite database, adds command context such as exit status and duration, and optionally syncs encrypted history between machines. It is popular with terminal-heavy users because it modernizes one of the oldest Unix workflows without forcing a specific shell.

Project history

The Atuin GitHub repository was created in October 2020. The README frames the project as replacing existing shell history with a SQLite database and adding contextual metadata, search UI, statistics, and optional encrypted synchronization through an Atuin server.

Atuin's early public release history in the GitHub releases API reaches at least the 0.6 series in 2021, with later version lines moving through v11 in 2022, v17 in 2023, and v18 in 2024. By the 18.x series, the project had a large release surface: prebuilt binaries, installers, shell integrations, a self-hosted server binary, documentation, and continuing changes to search, sync, daemon, and AI-related terminal workflows.

The project kept the local-first model central while expanding the surrounding system. Configuration docs still describe `~/.config/atuin/config.toml` and `~/.local/share/atuin`, while the sync guide documents registering, storing a local encryption key, and using manual or automatic sync.

Adoption history

Atuin's adoption path followed shell users rather than service operators first. The README lists zsh, bash, fish, nushell, xonsh, and PowerShell support, and the quickstart flow is a shell install, `atuin register`, `atuin import auto`, and `atuin sync`.

The package-manager metadata in this batch shows wide packaging across Alpine, Homebrew, Debian, Fedora, MacPorts, Nix, Arch, Scoop, WinGet, and openSUSE. That spread is a strong package-culture signal: Atuin is not only a Cargo crate or GitHub binary, but a tool distributions expect terminal users to install through their normal system package channels.

The README also advertises community channels and a contributor graph, while the GitHub API showed roughly thirty thousand stars during this run. Those are not functional requirements, but they explain why shell-history nerds recognize Atuin as part of the modern Rust CLI wave alongside tools that replace long-lived Unix defaults with richer local databases and fuzzy interfaces.

How it is used

Atuin's everyday usage is interactive: bind Ctrl-R or the up arrow to its full-screen history search, import old shell history, and search across commands with filters for exit status, time, current directory, session, host, or workspace. The README example searches successful `make` commands run after a natural-language time expression.

The configuration docs state that Atuin stores config in `~/.config/atuin/config.toml`, data under `~/.local/share/atuin` unless XDG variables override it, and defaults the local history database to `~/.local/share/atuin/history.db`. The same docs identify the encryption key and session-token paths, which is why package databases should treat those files as credentials rather than mere cache.

Sync is optional. With one machine it behaves like an encrypted backup; with multiple machines it unifies history across terminals and hosts. Users can use the hosted Atuin service, self-host `atuin-server`, or skip sync entirely.

Why package nerds care

Atuin is package-nerd catnip because it turns a humble dotfile-era feature into a cross-shell, cross-platform database-backed CLI with state, sync, packaging splits, and XDG-path behavior. Formula metadata has to know not just the executable name, but also the data files that become personal secrets.

It also illustrates the Rust CLI packaging pattern: upstream publishes release artifacts and installers, but downstream package managers carry the tool for users who want normal upgrades and shell integration without a curl pipe. The separate `atuin-server` formula adds another wrinkle because the same repository produces both a daily interactive CLI and a deployable sync service.

Timeline

  • 2020: Atuin repository created on GitHub.
  • 2021: Early 0.6 and 0.7 releases published.
  • 2022: v0.10 shipped and the project later jumped to v11.
  • 2023: v17 release line published.
  • 2024: v18 release line began.
  • 2026: v18.16.x releases included continued shell, sync, server, and AI workflow changes.

Related projects

  • atuin-server: the self-hosted sync server split into its own installable binary.
  • SQLite: Atuin's default local history database.
  • fzf-style fuzzy search: the documented inspiration for Atuin fuzzy search syntax.
  • Native shell history in zsh, bash, fish, nushell, xonsh, and PowerShell: the behavior Atuin augments or replaces.

security posture

Risk level: orange

formula declares a Homebrew service. generalized runtime or code generation signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • formula declares a Homebrew service
  • generalized runtime or code generation signal

Signals

  • metadata:service
  • text:shell

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
$XDG_CONFIG_HOME/atuin/config.toml~/.config/atuin/config.toml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
$XDG_DATA_HOME/atuin/key$XDG_DATA_HOME/atuin/session~/.local/share/atuin/key~/.local/share/atuin/session

executables

Installed executables

CommandKindExposureNote
atuinexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version18.18.1
manager updated2026-07-28
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:atuin
Version18.18.1
Package managerHomebrew
Homepagehttps://atuin.sh/
Repositoryhttps://github.com/atuinsh/atuin
Last updated2026-07-28T04:34:53Z
Pulseupdated
Bottlenot recorded
Servicenone declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation