macOS
Homebrewverified · 100%
brew install joseprovider-native install command
brew / rank 5830
Install jose with Homebrew
C-language implementation of Javascript Object Signing and Encryption. Version 15 via Homebrew; verified 2026-06-08.
install
Additional install commands
overview
Package summary
C-language implementation of Javascript Object Signing and Encryption
Project links
Commands and aliases
- jose
history
Project history and usage
José is a C implementation and command-line utility for the IETF JSON Object Signing and Encryption family of standards, including JWS, JWE, JWK, JWA, JWT, JOSE examples, and JWK thumbprints. It gives systems programmers and shell users a native CLI for operations that are more often hidden inside web-framework libraries.
Project history
The JOSE RFC set was published as proposed standards in May 2015. The latchset/jose repository followed in 2016, after the standards had stabilized, with a README positioning the project as a C-language implementation tested against RFC test vectors.
Early GitHub releases appeared in August 2016. Subsequent releases kept the project useful as a small, packaging-friendly crypto utility rather than a large application framework.
Adoption history
The input package metadata records Jose across several Unix package families, including Homebrew, Debian, Fedora/DNF, Alpine, Arch, Nix, Ubuntu, and openSUSE. That breadth reflects a common packaging role: a compact CLI and C library for JWT, JWK, signing, encryption, and thumbprint tasks in scripts and system components.
How it is used
The README documents key generation, extracting public JWKs, computing thumbprints, signing and verifying JWS payloads, and encrypting and decrypting JWE payloads from the shell. That makes Jose useful for testing identity-provider flows, debugging token material, and automating JOSE operations without writing an application.
Why package nerds care
For package maintainers, Jose is interesting because it maps web-token standards into a traditional Unix tool shape: a C codebase, Meson build, OpenSSL/Jansson dependencies, manpage-style CLI behavior, and distro packages. It is the kind of small utility that becomes valuable glue in security packaging even when end users mostly know higher-level JWT libraries.
Timeline
- 2015-05: RFC 7515 through RFC 7519 standardized the core JOSE/JWT documents.
- 2016-06: The latchset/jose repository was created on GitHub.
- 2016-08: v1 was published as an early GitHub release.
- 2021-05: v11 was published after Jose had already reached multiple distro package sets.
- 2026-06: v15 was published on GitHub.
Related projects
- Jose belongs to the wider JOSE ecosystem alongside language-specific libraries such as go-jose, node-jose, and Python JOSE bindings. It is also tied directly to IETF standards work around JWS, JWE, JWK, JWA, JWT, and related examples and thumbprint specifications.
Sources
security posture
Risk level: blue
broad file, network, media, or database tool signal.
Risk classifier
blue risk · medium confidence · tool
Why
- broad file, network, media, or database tool signal
Signals
- text:encrypt
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
jose | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version15
manager updated2026-06-08
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:jose |
|---|---|
| Version | 15 |
| Package manager | Homebrew |
| Homepage | https://github.com/latchset/jose |
| Repository | https://github.com/latchset/jose |
| Last updated | 2026-06-08T14:32:19Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated package history
- pkgdb category and tag curation