macOS
Homebrewverified · 100%
brew install envelopelocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install envelopeMacPorts ports tree · sysutils/envelope/Portfile · source: api.github.com
brew / rank 7248
Install envelope with Homebrew, MacPorts
Environment variables CLI tool. Version 0.8.0 via Homebrew; verified from local package data. Also installable with macports: sudo port install envelope.
install
Additional install commands
overview
Package summary
Environment variables CLI tool
Project links
Commands and aliases
- envelope
history
Project history and usage
envelope is a Rust command-line tool for managing environment variables in a per-project SQLite database named .envelope.
Project history
The GitHub repository was created in September 2023. The README describes an environment variables CLI backed by SQLite, with commands for initializing, adding, listing, importing, exporting, history, diffing, and locking the database.
Adoption history
The input package metadata lists Homebrew and MacPorts packages. Homebrew currently tracks the 0.8.0 source archive from the official GitHub release.
How it is used
Users initialize a project database with envelope init, add environment variables under named environments, export them into shell workflows, import from .env files, and lock or unlock the database for sensitive projects.
Why package nerds care
The project is interesting to package users because it replaces scattered .env files with a single SQLite-backed CLI database while retaining import/export workflows for traditional dotenv tooling.
Timeline
- 2023: GitHub repository created
- 2023: 0.1.7a published on GitHub releases
- 2026: 0.8.0 published on GitHub releases and tracked by Homebrew
Related projects
- The README explicitly positions envelope around .env file migration and shell/CI environment variable workflows.
Sources
- GitHub releases API: 0.1.7a published 2023-10-14 and 0.8.0 published 2026-04-19
- GitHub repository API: created_at 2023-09-21, language Rust, topics, and metadata
- Homebrew formula API: stable version 0.8.0 and official source archive
- Official README: SQLite-backed .envelope storage, migration, security best practices, and command examples
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
.envelope
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
.envelope
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
envelope | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version0.8.0
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:envelope |
|---|---|
| Version | 0.8.0 |
| Package manager | Homebrew |
| Homepage | https://github.com/mattrighetti/envelope |
| Repository | https://github.com/mattrighetti/envelope |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
MacPorts95%
envelope
sudo port install envelope- normalized package name match
- Matched by: Envelope
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation