pkg.soopen package index

brew / rank 9827

Install signify-osx with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper

Cryptographically sign and verify files. Version 1.4 via Homebrew; verified from local package data. Also installable with macports: sudo port install signify.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install signify-osx

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install signify

MacPorts ports tree · security/signify/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add signify

Alpine Linux edge package indexes · signify · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install signify

Debian stable package indexes · signify · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install signify

Fedora Rawhide package metadata · signify · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#signify

nixpkgs package indexes · pkgs/by-name/si/signify/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S signify

Arch Linux sync databases · signify · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install signify

openSUSE Tumbleweed package metadata · signify · source: download.opensuse.org

overview

Package summary

Cryptographically sign and verify files

Commands and aliases

  • signify

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
signifyexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version1.4
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:signify-osx
Version1.4
Package managerHomebrew
Homepagehttps://man.openbsd.org/signify.1
Repositoryhttps://github.com/jpouellet/signify-osx
Bottlenot recorded
Servicenone declared

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

MacPorts94%

signify

sudo port install signify
  • installed executable or alias match
  • Matched by: Signify
MacPorts ports tree · api.github.com · MacPorts ports tree: security/signify/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Debian apt92%

signify 1.14-7

Automatic, semi-random ".signature" rotator/generator

http://signify.sf.net

sudo apt install signify
  • Section: mail
  • Architecture: all
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Signify
Debian stable package indexes · deb.debian.org · Debian stable package indexes: signify from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix92%

signify

nix profile install nixpkgs#signify
  • installed executable or alias match
  • Matched by: Signify
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/si/signify/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt92%

signify 1.14-7

Automatic, semi-random ".signature" rotator/generator

http://signify.sf.net

sudo apt install signify
  • Section: universe/mail
  • Architecture: all
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Signify
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: signify from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk92%

signify 32-r1

OpenBSD tool to sign and verify signatures on files

https://github.com/aperezdc/signify

sudo apk add signify
  • License: ISC
  • Architecture: x86_64
  • Source Package: signify
  • 1 dependencies
  • 1 provides
  • installed executable or alias match
  • Matched by: Signify
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: signify from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk92%

signify-doc 32-r1

OpenBSD tool to sign and verify signatures on files (documentation)

https://github.com/aperezdc/signify

sudo apk add signify-doc
  • License: ISC
  • Architecture: x86_64
  • Source Package: signify
  • installed executable or alias match
  • Matched by: Signify
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: signify-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf92%

signify 33-2.fc45

Sign and verify signatures on files

https://codeberg.org/aperezdc/signify

sudo dnf install signify
  • License: ISC AND Beerware AND BSD-3-Clause AND MIT AND LicenseRef-Fedora-Public-Domain
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: signify
  • 3 dependencies
  • 1 provides
  • installed executable or alias match
  • Matched by: Signify
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: signify from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst
pacman92%

signify 33-1

OpenBSD tool to cryptographically sign and verify files

https://codeberg.org/aperezdc/signify

sudo pacman -S signify
  • License: BSD
  • Architecture: x86_64
  • 2 dependencies
  • installed executable or alias match
  • Matched by: Signify
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: signify from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper92%

signify 33-1.3

OpenBSD tool to sign and verify signatures on files (portable version)

https://codeberg.org/aperezdc/signify

sudo zypper install signify
  • License: BSD-3-Clause
  • Category: Productivity/Networking/Security
  • Architecture: x86_64
  • Source Package: signify
  • 2 dependencies
  • 1 provides
  • installed executable or alias match
  • Matched by: Signify
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: signify from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation