# Install jose with Homebrew, apk, apt, dnf, Nix, pacman, zypper

C-language implementation of Javascript Object Signing and Encryption. Version 15 via Homebrew; verified 2026-06-08. Also installable with debian: sudo apt install jose.

## Install

```sh
sudo av install brew:jose
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install jose
```

  Evidence: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add jose
```

  Evidence: Alpine Linux edge package indexes: jose from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install jose
```

  Evidence: Debian stable package indexes: jose from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install jose
```

  Evidence: Fedora Rawhide package metadata: jose from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#jose
```

  Evidence: nixpkgs package indexes: pkgs/by-name/jo/jose/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S jose
```

  Evidence: Arch Linux sync databases: jose from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install jose
```

  Evidence: openSUSE Tumbleweed package metadata: jose from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## Package facts

- **Package key:** brew:jose
- **Package manager:** Homebrew
- **Version:** 15
- **Source summary:** C-language implementation of Javascript Object Signing and Encryption
- **Homepage:** <https://github.com/latchset/jose>
- **Repository:** <https://github.com/latchset/jose>
- **Last updated:** 2026-06-08T14:32:19Z
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- jose (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 15
## Project history and usage

José is a C implementation and command-line utility for the IETF JSON Object Signing and Encryption family of standards, including JWS, JWE, JWK, JWA, JWT, JOSE examples, and JWK thumbprints. It gives systems programmers and shell users a native CLI for operations that are more often hidden inside web-framework libraries.

### Project history

The JOSE RFC set was published as proposed standards in May 2015. The latchset/jose repository followed in 2016, after the standards had stabilized, with a README positioning the project as a C-language implementation tested against RFC test vectors.

Early GitHub releases appeared in August 2016. Subsequent releases kept the project useful as a small, packaging-friendly crypto utility rather than a large application framework.

### Adoption history

The input package metadata records Jose across several Unix package families, including Homebrew, Debian, Fedora/DNF, Alpine, Arch, Nix, Ubuntu, and openSUSE. That breadth reflects a common packaging role: a compact CLI and C library for JWT, JWK, signing, encryption, and thumbprint tasks in scripts and system components.

### How it is used

The README documents key generation, extracting public JWKs, computing thumbprints, signing and verifying JWS payloads, and encrypting and decrypting JWE payloads from the shell. That makes Jose useful for testing identity-provider flows, debugging token material, and automating JOSE operations without writing an application.

### Why package nerds care

For package maintainers, Jose is interesting because it maps web-token standards into a traditional Unix tool shape: a C codebase, Meson build, OpenSSL/Jansson dependencies, manpage-style CLI behavior, and distro packages. It is the kind of small utility that becomes valuable glue in security packaging even when end users mostly know higher-level JWT libraries.

### Timeline

- 2015-05: RFC 7515 through RFC 7519 standardized the core JOSE/JWT documents.
- 2016-06: The latchset/jose repository was created on GitHub.
- 2016-08: v1 was published as an early GitHub release.
- 2021-05: v11 was published after Jose had already reached multiple distro package sets.
- 2026-06: v15 was published on GitHub.

### Related projects

- Jose belongs to the wider JOSE ecosystem alongside language-specific libraries such as go-jose, node-jose, and Python JOSE bindings. It is also tied directly to IETF standards work around JWS, JWE, JWK, JWA, JWT, and related examples and thumbprint specifications.

### Sources

- <https://datatracker.ietf.org/doc/rfc7515/>
- <https://datatracker.ietf.org/doc/rfc7519/>
- <https://formulae.brew.sh/formula/jose>
- <https://github.com/latchset/jose>
- <https://github.com/latchset/jose/releases>


## Security Notes

broad file, network, media, or database tool signal.

- **Geiger risk:** blue / medium
- broad file, network, media, or database tool signal

## Other Package-Manager Records

- Debian apt - jose - 14-2: normalized package name match | Debian stable package indexes: jose from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | C implementation of Javascript Object Signing and Encryption standards | https://github.com/latchset/jose
- Debian apt - libjose-dev - 14-2: normalized package name match | Debian stable package indexes: libjose-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Javascript Object Signing and Encryption (José) - development files | https://github.com/latchset/jose
- Debian apt - libjose0 - 14-2: normalized package name match | Debian stable package indexes: libjose0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Javascript Object Signing and Encryption (José) - library | https://github.com/latchset/jose
- Nix - jose: normalized package name match | nixpkgs package indexes: pkgs/by-name/jo/jose/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - jose - 13-1: normalized package name match | Ubuntu 24.04 LTS package indexes: jose from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | C implementation of Javascript Object Signing and Encryption standards | https://github.com/latchset/jose
- Ubuntu apt - libjose-dev - 13-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libjose-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Javascript Object Signing and Encryption (José) - development files | https://github.com/latchset/jose
- Ubuntu apt - libjose0 - 13-1: normalized package name match | Ubuntu 24.04 LTS package indexes: libjose0 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Javascript Object Signing and Encryption (José) - library | https://github.com/latchset/jose
- apk - jose - 14-r0: normalized package name match | Alpine Linux edge package indexes: jose from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | C-language implementation of Javascript Object Signing and Encryption | https://github.com/latchset/jose
- apk - jose-dev - 14-r0: normalized package name match | Alpine Linux edge package indexes: jose-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | C-language implementation of Javascript Object Signing and Encryption (development files) | https://github.com/latchset/jose
- apk - jose-doc - 14-r0: normalized package name match | Alpine Linux edge package indexes: jose-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | C-language implementation of Javascript Object Signing and Encryption (documentation) | https://github.com/latchset/jose
- apk - libjose - 14-r0: normalized package name match | Alpine Linux edge package indexes: libjose from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | C-language implementation of Javascript Object Signing and Encryption (libraries) | https://github.com/latchset/jose
- dnf - jose - 14-8.fc45: normalized package name match | Fedora Rawhide package metadata: jose from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Tools for JSON Object Signing and Encryption (JOSE) | https://github.com/latchset/jose
- dnf - libjose - 14-8.fc45: normalized package name match | Fedora Rawhide package metadata: libjose from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Library implementing JSON Object Signing and Encryption | https://github.com/latchset/jose
- dnf - libjose-devel - 14-8.fc45: normalized package name match | Fedora Rawhide package metadata: libjose-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development files for libjose | https://github.com/latchset/jose
- pacman - jose - 15-2: normalized package name match | Arch Linux sync databases: jose from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | C-language implementation of Javascript Object Signing and Encryption | https://github.com/latchset/jose
- zypper - jose - 14-1.4: normalized package name match | openSUSE Tumbleweed package metadata: jose from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | C-language implementation of Javascript Object Signing and Encryption | https://github.com/latchset/jose


## Combined YAML source

View the package source record on GitHub. [combined/jose.yml](https://github.com/mxcl/pkgdb/blob/main/combined/jose.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
