macOS
Homebrewverified · 100%
brew install kekkailocal Homebrew formula metadata
brew / rank 6420
Install kekkai with Homebrew
File integrity monitoring tool. Version 0.2.11 via Homebrew; verified 2026-07-28.
install
Additional install commands
overview
Package summary
File integrity monitoring tool
Project links
Commands and aliases
- kekkai
history
Project history and usage
Kekkai is a Go file-integrity monitoring CLI that records content hashes during deployment and verifies them later to detect unauthorized file changes.
Project history
The project was created on GitHub on 2025-08-12 by catatsuy. Its README presents it as a production-server tool designed around content-only hashing, immutable exclude rules, symlink-aware checks, and optional manifest storage in Amazon S3.
Adoption history
Kekkai is a young, specialized security utility. By 2026-07-01, Homebrew formula metadata listed v0.2.9, and GitHub API metadata reported 132 stars and one fork.
How it is used
The typical workflow is to generate a manifest for a deployed application directory, store it locally or in S3, and run periodic verification from cron or monitoring systems. The README emphasizes excluding only generated files such as logs, caches, uploads, and NFS mounts.
Why package nerds care
Kekkai is notable as a small single-binary alternative to heavier file-integrity stacks. It packages a deliberately narrow deployment-time manifest model that fits immutable-server and cloud-IAM workflows.
Timeline
- 2025-08-12: GitHub repository created.
- 2026-01-03: v0.2.0 release published.
- 2026-06-28: v0.2.9 release published.
- 2026-07-01: Homebrew formula metadata listed kekkai v0.2.9.
Related projects
- Amazon S3 is used as the recommended secure manifest store.
- Traditional tools such as tar and rsync are named by the README as less suitable comparisons for this content-hash use case.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for kekkai. Nucleus package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
kekkai | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version0.2.11
manager updated2026-07-28
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:kekkai |
|---|---|
| Version | 0.2.11 |
| Package manager | Homebrew |
| Homepage | https://github.com/catatsuy/kekkai |
| Repository | https://github.com/catatsuy/kekkai |
| Last updated | 2026-07-28T09:52:29Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- pkg.so package database
- pkgdb category and tag curation