# 使用 Homebrew 安装 varlock 查看 varlock 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:varlock ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install varlock ``` 证据: local Homebrew formula metadata ## 软件包事实 - **软件包键:** brew:varlock - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 1.16.0 - **来源摘要:** Add declarative schema to .env files using @env-spec decorator comments - **主页:** - **上游文档:** - **许可证:** MIT - **源码归档:** - **最后更新:** 2026-08-01T21:49:42Z - **已生成:** 2026-08-04T22:13:35+00:00 ## 可执行文件 - varlock (cli) - varlock (别名) ## 依赖 - node ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 1.16.0 - 管理器更新时间: 2026-08-01 - 本地数据: OK - 上游仓库: https://varlock.dev - 信息: Release/tag comparison is only available for GitHub repositories. ## 项目历史与用法 Varlock is a young configuration and secrets tool for `.env`-based workflows. Its project tagline frames the tool around AI-safe `.env` files: schemas are safe for agents and collaborators to read, while actual secrets are resolved separately. ### 项目历史 The project is built on `@env-spec`, a DSL that extends normal `.env` syntax with JSDoc-style decorator comments and function-call values. The initial `@env-spec` RFC was proposed on May 13, 2025 by maintainers Phil Millman and Theo Ephraim, describing the goal of richer validation, type coercion, sensitive-value handling, and dynamic loading while keeping the familiar `.env` format. ### 采用历史 Varlock targets the pain point left by `.env.example`: example files are safe to commit but often drift from real runtime requirements. Varlock instead promotes a committed `.env.schema` as a single source of truth, with local or environment-specific `.env.*` files supplying values. ### 使用方式 Typical usage starts with `varlock init`, which scans existing `.env` files and creates a root `.env.schema`. Users then run `varlock load` to validate and inspect resolved environment variables or `varlock run -- ` to execute a process with resolved values. The tool also ships as a standalone binary, Docker image, editor support, and plugins for secret backends such as 1Password, AWS, Azure, Google Secret Manager, HashiCorp Vault, and others. ### 为什么软件包爱好者会关心 For package users, Varlock is notable as an attempt to standardize metadata around environment variables without forcing a new YAML, JSON, or TypeScript schema file. It is especially tuned for modern AI-assisted development, where agents need configuration context but should not be handed plaintext secrets. ### 时间线 - 2025-05-13: Initial `@env-spec` RFC proposed. - 2026: Repository documents Varlock as a CLI, Docker image, VS Code extension ecosystem, and plugin host for multiple secret backends. ### Related projects - DMNO is cited by the maintainers as the predecessor whose lessons informed Varlock. - `@env-spec` is the underlying specification and parser family used by Varlock. ### 来源 - Initial @env-spec RFC: https://github.com/dmno-dev/varlock/discussions/17 - Official @env-spec overview: https://varlock.dev/env-spec/overview/ - Official GitHub repository: https://github.com/dmno-dev/varlock - Official installation guide: https://varlock.dev/getting-started/installation/ ## 安全说明 没有找到 varlock 的匹配本地密钥处理 manifest。软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .env.schema ## Credential files - Unix: .env.local, .env.* ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** varlock - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 相关链接 - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://pkg.so/zh-hans/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Networking and protocol packages](https://pkg.so/zh-hans/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/zh-hans/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [node](https://pkg.so/zh-hans/brew/node/) - Runtime dependency declared by Homebrew. - [doppler](https://pkg.so/zh-hans/brew/doppler/) - Shares pkgdb curated category or tags: cli, configuration, environment-variables, secrets-management, security. - [infisical](https://pkg.so/zh-hans/brew/infisical/) - Shares pkgdb curated category or tags: cli, environment-variables, secrets-management, security. - [secretspec](https://pkg.so/zh-hans/brew/secretspec/) - Shares pkgdb curated category or tags: cli, configuration, secrets-management, security. - [envio](https://pkg.so/zh-hans/brew/envio/) - Shares pkgdb curated category or tags: cli, configuration, environment-variables, secrets-management, security. - [sops](https://pkg.so/zh-hans/brew/sops/) - Shares pkgdb curated category or tags: cli, secrets-management, security. - [ykman](https://pkg.so/zh-hans/brew/ykman/) - Shares pkgdb curated category or tags: cli, configuration, security. - [betterleaks](https://pkg.so/zh-hans/brew/betterleaks/) - Shares pkgdb curated category or tags: cli, security, validation. - [openbao](https://pkg.so/zh-hans/brew/openbao/) - Shares pkgdb curated category or tags: cli, secrets-management, security. - [varlock](https://pkg.so/zh-hans/npm/varlock/) - Same normalized package name appears in another local ecosystem. Shared terms: cli, env, files, management, secrets. - [varlock](https://pkg.so/zh-hans/npm/varlock/) - Same normalized package name in another local ecosystem. ## Combined YAML source View the package source record on GitHub. [combined/varlock.yml](https://github.com/mxcl/pkgdb/blob/main/combined/varlock.yml) ## 来源 - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - cross-ecosystem install command graph