macOS
Homebrewverified · 100%
brew install toml-bombadillocal Homebrew formula metadata
brew / rank 9894
Install toml-bombadil with Homebrew, pacman
Dotfile manager with templating. Version 4.2.0 via Homebrew; verified from local package data. Also installable with pacman: sudo pacman -S toml-bombadil.
install
Additional install commands
Linux
Arch Linux pacmanverified · 92%
sudo pacman -S toml-bombadilArch Linux sync databases · toml-bombadil · source: geo.mirror.pkgbuild.com
overview
Package summary
Dotfile manager with templating
Project links
Commands and aliases
- bombadil
history
Project history and usage
Toml Bombadil is a Rust dotfile manager centered on templates, profiles, hooks, and optional GPG-backed secrets. Its source-backed history is modest but clear: it was written to solve the author's recurring desktop-environment and machine-profile churn.
Project history
The README explains the project origin as a response to repeatedly switching desktop environments and needing dotfiles that could adapt across machines and setups. Instead of only symlinking files, Bombadil can create a copy, symlink that copy, and inject variables into the copied file as a template.
The repository has continued as a small Rust CLI project with documented package installation paths and a public release stream; GitHub lists 15 releases, with 4.2.0 as the latest release on 23 April 2025.
Adoption history
Adoption evidence is niche but package-relevant: the README documents Arch Linux installation with pacman, and the batch input records both Homebrew and pacman package-manager entries. The repository also points users to example dotfile repositories that use Bombadil.
How it is used
Users install the bombadil CLI to link dotfiles, apply profiles, inject variables into templates, run install hooks, and manage encrypted secrets in a dotfile repository.
Why package nerds care
Bombadil matters to package nerds as one of the TOML-named dotfile tools that packages a personal workstation workflow into a reproducible CLI. It is small enough that reliable history should stay close to the README and release metadata rather than inflated into a broader movement.
Timeline
- 2025: GitHub listed 4.2.0 as the latest toml-bombadil release.
- Current README: Documented pacman installation; the batch input recorded Homebrew packaging.
Related projects
- Other dotfile managers occupy the same package niche, but Bombadil distinguishes itself with TOML-flavored configuration, profiles, templating, hooks, and GPG secrets.
Sources
- https://github.com/oknozor/toml-bombadil
- https://github.com/oknozor/toml-bombadil/releases
- https://oknozor.github.io/toml-bombadil/
- input.source_facts.description
- input.source_facts.package-manager
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
bombadil | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version4.2.0
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:toml-bombadil |
|---|---|
| Version | 4.2.0 |
| Package manager | Homebrew |
| Homepage | https://github.com/oknozor/toml-bombadil |
| Repository | https://github.com/oknozor/toml-bombadil |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
pacman95%
toml-bombadil 4.2.0-2
A dotfile manager with templating
https://github.com/oknozor/toml-bombadil
sudo pacman -S toml-bombadil- License: MIT
- Architecture: x86_64
- 5 dependencies
- normalized package name match
- Matched by: Toml Bombadil
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation