# Install fallow with Homebrew Codebase intelligence for TypeScript and JavaScript. Version 3.12.0 via Homebrew; verified 2026-08-03. ## Install ```sh sudo av install brew:fallow ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install fallow ``` Evidence: local Homebrew formula metadata ## Package facts - **Package key:** brew:fallow - **Package manager:** Homebrew - **Version:** 3.12.0 - **Source summary:** Codebase intelligence for TypeScript and JavaScript - **Homepage:** - **Repository:** - **Last updated:** 2026-08-03T15:50:06Z - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - fallow (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 3.12.0 ## Project history and usage Fallow is a Rust-native codebase intelligence CLI for JavaScript and TypeScript projects. Its official README positions it as deterministic analysis for quality, changed-code risk, hotspots, duplication, architecture, dependency hygiene, cleanup opportunities, CI, editors, and AI agents. ### Project history The GitHub repository was created in March 2026, making Fallow a new project rather than a long-running ecosystem tool. The README emphasizes static analysis as free and open source, with optional runtime intelligence layered on top for production execution evidence. The project ships several integration surfaces from the same package family: a CLI, LSP server, MCP server, npm wrapper, Node API, Docker image, and versioned TypeScript output contracts. ### Adoption history Official adoption signals are still early but visible in the project's own distribution choices: npm and Homebrew packaging, `npx fallow` one-off usage, `cargo install fallow-cli`, Docker images, and documented workflows for CI and agent review loops. The README also states that the project dogfoods its JavaScript and TypeScript surfaces in CI. ### How it is used Common commands include `fallow audit` for changed-code review, `fallow health --score --hotspots --targets` for project quality and refactor targets, and `fallow dead-code` for cleanup findings. JSON output is documented for machine consumers. For agent-oriented workflows, Fallow exposes structured JSON, an MCP server, an LSP, and inspection commands that answer dependency, risk, duplication, cleanup, and evidence questions without asking an AI model to infer them from raw grep results. ### Why package nerds care Fallow is notable in package-manager culture because it packages repository-scale static analysis as a fast local CLI with machine-readable contracts. It sits near linters and type checkers but focuses on cross-file system properties, making it useful as a pre-review gate for both humans and coding agents. ### Timeline - 2026: Repository created. - 2026: v2 release stream active with agent, MCP, LSP, Docker, security, and typed-output features. - 2026: v2.103.0 released. ### Related projects - npm distributes the JavaScript-facing package. - Cargo distributes the Rust CLI path. - MCP and LSP integrations expose Fallow findings to agents and editors. ### Sources - - - - - - ## Security Notes No matching local secret-handling manifest was found for fallow. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .fallowrc.json, .fallowrc.jsonc, fallow.toml, .fallow.toml ## Combined YAML source View the package source record on GitHub. [combined/fallow.yml](https://github.com/mxcl/pkgdb/blob/main/combined/fallow.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - cross-ecosystem install command graph