macOS
Homebrewverified · 100%
brew install orogenelocal Homebrew formula metadata
brew / rank 11209
Install orogene with Homebrew, zypper
node_modules/ package manager and utility toolkit. Version 0.3.34 via Homebrew; verified 2026-07-11. Also installable with zypper: sudo zypper install oro.
install
Additional install commands
Linux
openSUSE zypperverified · 92%
sudo zypper install oroopenSUSE Tumbleweed package metadata · oro · source: download.opensuse.org
overview
Package summary
node_modules/ package manager and utility toolkit
Project links
Commands and aliases
- oro
history
Project history and usage
Orogene is a Rust-oriented package manager for JavaScript projects that need a maintained node_modules tree. Its own tagline, "Makes node_modules happen," is literal: the tool is aimed at bundlers, CLIs, and Node.js applications where dependency installation speed, cache reuse, and reproducible local trees matter.
Project history
GitHub records the orogene/orogene repository as created on 2020-07-14. Public releases in 2023 shipped prebuilt binaries, installer scripts, npm packaging, and crates.io distribution, showing a project that tried to meet JavaScript developers where they already install tools while implementing the installer in Rust.
The README later documented a shift to a closed-source development model with paid licenses, with releases hosted from the GitHub repository and limited features without a developer license. That makes Orogene an unusual entry in the Node package-manager space: a performance-focused package manager whose public history includes both open-source Rust experimentation and a sustainability/licensing pivot.
Adoption history
Orogene has distribution hooks through GitHub releases, npm, crates.io, Homebrew, and distro packaging metadata, but the available public sources do not show broad ecosystem adoption comparable to npm, Yarn, or pnpm. Its adoption story is better described as niche package-manager experimentation and benchmarking interest than as a default JavaScript workflow.
How it is used
Developers use the oro executable to make or refresh node_modules for projects and tools that expect Node's traditional dependency layout. The README emphasizes speed, low memory use, low disk use, and integration into workflows where developers do not want to think about whether node_modules matches dependency metadata.
Why package nerds care
For package nerds, Orogene is interesting because it attacks the old node_modules installation problem with a Rust implementation and an explicit performance agenda. It also illustrates the business tension around package tooling: even infrastructure-flavored developer tools can move from open development to paid licensing when maintenance cost becomes part of the design.
Timeline
- 2020-07-14: GitHub repository created.
- 2023-05-21: release v0.3.27 published with prebuilt binaries, installer scripts, and npm package artifacts.
- 2023-10-09: release v0.3.34 published, one of the visible public releases before the repository's later closed-source-development notice.
Related projects
- Orogene belongs to the same problem family as npm, Yarn, and pnpm: all manage JavaScript dependencies, but Orogene focuses its public identity on making node_modules fast and low-fuss rather than replacing the Node package ecosystem itself.
Sources
- https://api.github.com/repos/orogene/orogene
- https://api.github.com/repos/orogene/orogene/releases
- https://crates.io/crates/orogene
- https://formulae.brew.sh/formula/orogene
- https://github.com/orogene/orogene
- https://raw.githubusercontent.com/orogene/orogene/main/README.md
- https://www.npmjs.com/package/oro
security posture
Risk level: orange
infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:package manager
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
./oro.kdl
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
./oro.kdl
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
oro | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version0.3.34
manager updated2026-07-11
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:orogene |
|---|---|
| Version | 0.3.34 |
| Package manager | Homebrew |
| Homepage | https://orogene.dev |
| Repository | https://github.com/orogene/orogene |
| Last updated | 2026-07-11T09:50:50+09:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
zypper92%
oro 2.0.8-298.7
Full regular expressions API
https://jakarta.apache.org/oro/
sudo zypper install oro- License: Apache-2.0
- Category: Development/Libraries/Java
- Architecture: noarch
- Source Package: oro
- 2 dependencies
- 3 provides
- installed executable or alias match
- Matched by: Oro
zypper92%
oro-javadoc 2.0.8-298.7
Javadoc for oro
https://jakarta.apache.org/oro/
sudo zypper install oro-javadoc- License: Apache-2.0
- Category: Development/Libraries/Java
- Architecture: noarch
- Source Package: oro
- 1 dependencies
- 1 provides
- installed executable or alias match
- Matched by: Oro
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation