pkg.sopackage field notes

brew / 排名 2158

使用 Homebrew 安装 cocogitto

查看 cocogitto 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install cocogitto

provider-native install command

概览

软件包摘要

Conventional Commits toolbox

命令和别名

  • cog

历史

项目历史与用法

Cocogitto is a Rust CLI and GitOps toolbox for Conventional Commits and Semantic Versioning. It packages commit-message creation, commit-history checking, changelog generation, version bumping, hooks, and CI integrations into the `cog` command.

项目历史

The GitHub repository was created in September 2020, and crates.io shows the `cocogitto` crate created later that month. The project README describes it as the Conventional Commits toolbox.

Early changelog entries in 2020 show rapid construction of core features: commit creation, verification, logs, changelog generation, bumping, hooks, and the move to `cog.toml` configuration. Later releases expanded CI/CD, Docker, monorepo workflows, signing support, and generated configuration reference docs.

采用历史

Cocogitto is distributed through Cargo and several OS package managers. crates.io lists more than 200 thousand downloads, while the input records packaging in Homebrew, apk, Debian, MacPorts, Nix, pacman, Scoop, and zypper.

The official docs also advertise installation through Cargo, Arch Linux, NixOS, Void Linux, Homebrew, and Chocolatey, showing that the project deliberately supports both Rust-native and OS package-manager installation paths.

使用方式

The main binary is `cog`. Users can run `cog commit` to create Conventional Commit messages, `cog check` to validate history, `cog changelog` to generate changelogs, and `cog bump` to derive semantic versions from commit history.

Configuration lives in a repository-root `cog.toml`. The official config reference describes settings for version generation, changelog handling, commit conventions, hooks, and monorepo support.

为什么软件包爱好者会关心

Cocogitto is a package-nerd tool about packages: it automates the release metadata loop around commits, changelogs, SemVer, tags, and CI. It is especially interesting for repos that want release automation without adopting a large hosted release platform.

Its distribution story is also typical of modern Rust CLIs: a Cargo crate is the canonical package, but downstream OS packages make the same single binary available to non-Rust users.

时间线

  • 2020: Repository created and first rapid series of 0.x changelog releases published.
  • 2020: `cog.toml` configuration name introduced in the 0.32.1 era.
  • 2021: 1.0.0 released.
  • 2023: 6.0.0 adds Docker image support and other release-flow changes.
  • 2024: 6.2.0 migrates docs to VitePress and expands configuration docs.
  • 2026: 7.0.0 adds monorepo dependency resolver work and package updates.

Related projects

  • Conventional Commits and SemVer are the standards Cocogitto is built around.
  • cocogitto-action and cocogitto-bot are related GitHub integrations linked from the official docs.
  • Adjacent changelog/release tools include git-cliff, release-plz, semantic-release, and commitlint.

安全态势

风险级别:绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • 未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
cog.toml

可执行文件

已安装的可执行文件

命令类型暴露范围备注
cog可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-08-03
管理器版本7.0.0
管理器更新时间2026-06-22
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:cocogitto
版本7.0.0
软件包管理器Homebrew
主页https://docs.cocogitto.io/
仓库https://github.com/cocogitto/cocogitto
最后更新2026-06-22T14:03:03-07:00
Pulseupdated
Bottle未记录
服务未声明

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation