macOS
Homebrew已验证 · 100%
brew install git-vendorlocal Homebrew formula metadata
安装
其他安装命令
Linux
Nix已验证 · 92%
nix profile install nixpkgs#git-vendornixpkgs package indexes · pkgs/by-name/gi/git-vendor/package.nix · 来源: api.github.com
概览
软件包摘要
Command for managing git vendored dependencies
历史
项目历史与用法
git-vendor is a shell Git command that wraps git subtree to add, list, update, and share vendored dependencies.
项目历史
Brett Langdon created the git-vendor repository in January 2016. The README explains that the tool follows the Go vendoring convention of storing dependencies under vendor/ using fully qualified project paths.
The project stayed close to git subtree. Later releases refined command behavior, including a 2022 release that added a push command through a community contribution.
采用历史
git-vendor spread through source installation, Homebrew, and other package-manager formulas. Its adoption niche was teams that wanted vendored source checked into a repository without relying on language-specific package managers.
使用方式
Practitioners use git vendor add to import a repository at a ref, git vendor list to inspect recorded source metadata, git vendor update to move a vendored dependency forward, and git vendor upstream to share changes back.
为什么软件包爱好者会关心
The tool is significant in package-management history because it captures a pre-module and cross-language vendoring pattern: source is copied into the tree, but the Git history and vendor metadata preserve where that source came from.
时间线
- 2016: Repository created for a git subtree-based vendoring workflow.
- 2021: v1.2.x releases refined update behavior and portability.
- 2022: v1.3.0 added a push command.
Related projects
- git subtree, Go vendor directories, Homebrew
来源
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 1 个平台目标。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
git-vendor | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-04
管理器版本1.3.0
管理器更新时间
本地数据OK
上游当前
检测到的最新版本v1.3.0
https://github.com/brettlangdon/git-vendor
- 信息No package-manager update timestamp was available.低 置信度
安装元数据
软件包元数据
| 软件包键 | brew:git-vendor |
|---|---|
| 版本 | 1.3.0 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/git-vendor |
| 主页 | https://brettlangdon.github.io/git-vendor |
| 仓库 | https://github.com/brettlangdon/git-vendor |
| 上游文档 | https://brettlangdon.github.io/git-vendor |
| 许可证 | MIT |
| 源码归档 | https://github.com/brettlangdon/git-vendor/archive/refs/tags/v1.3.0.tar.gz |
| Bottle | 可用 (于 all) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | git-vendor |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Nix95%
git-vendor
nix profile install nixpkgs#git-vendor- normalized package name match
- 匹配方式：Git Vendor
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation