pkg.sopackage field notes

brew / 排名 8162

使用 Homebrew 安装 yash

查看 yash 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install yash

provider-native install command

概览

软件包摘要

Yet another shell: a POSIX-compliant command-line shell

命令和别名

  • yash

历史

项目历史与用法

yash, Yet Another Shell, is Yuki Watanabe's POSIX-focused command-line shell. It aims to be highly POSIX-compliant while still offering interactive conveniences such as completion, prediction, arrays, aliases, extended globbing, and redirection features.

项目历史

Upstream NEWS records Yash 2.0 alpha0 as the first 2.x release on 2008-05-26. The project later moved to GitHub; the README says it is maintained on GitHub but was formerly on OSDN, and the GitHub repository was created on 2012-11-24.

A defining thread in Yash history is conformance work. NEWS records POSIX.1-2008 conformance in Yash 2.8 in April 2009, support for the 2013 edition of POSIX.1-2008 in 2.42 in August 2016, and support for POSIX.1-2008 Technical Corrigendum 2 in 2.44 in January 2017. The current README says Yash now fully supports POSIX.1-2024 except for listed limitations.

The project has stayed actively maintained in a conservative shell-tooling style. The README describes stable maintenance releases every three months or so, and GitHub releases show 2.61 published on 2026-03-03.

采用历史

Yash's adoption is niche compared with bash, zsh, dash, or fish, but it has a clear role for users who care about POSIX behavior, shell-language edge cases, and an interactive shell that does not primarily chase bash compatibility. Package managers such as Homebrew, MacPorts, Fedora, Nix, and Ubuntu carry it as an alternative shell rather than as a default system shell.

Its maintenance style also attracts shell implementers and portability-minded users: NEWS entries repeatedly track standard changes, built-in behavior, job control, pathname expansion, and line-editing details rather than splashy user-interface pivots.

使用方式

Users can run yash as an interactive shell, script interpreter, or login shell. The README documents startup files under `$XDG_CONFIG_HOME/yash/profile` or `~/.yash_profile` for login shells and `$XDG_CONFIG_HOME/yash/rc` or `~/.yashrc` for interactive configuration.

In practice it is useful for POSIX shell testing, portable script development, and users who want a smaller standards-oriented shell with interactive amenities such as command completion, history-based prediction, global aliases, arrays, and extended globbing.

为什么软件包爱好者会关心

yash is package-nerd significant because shells are both applications and compatibility surfaces. Packaging yash gives users a reproducible alternative interpreter for testing scripts against POSIX semantics without replacing the system `/bin/sh`.

It is also a good example of long-haul small-project maintenance: standards tracking, portability fixes, completion updates, and cautious release cadence matter more than branding. That makes it valuable in package collections even when its user base is specialized.

时间线

  • 2008-05-26: Yash 2.0 alpha0 is recorded as the first 2.x release.
  • 2009-04-18: Yash 2.8 NEWS states conformance to POSIX.1-2008.
  • 2012-11-24: magicant/yash repository is created on GitHub.
  • 2016-08-27: Yash 2.42 adds support for the 2013 edition of POSIX.1-2008.
  • 2017-01-17: Yash 2.44 adds support for POSIX.1-2008 Technical Corrigendum 2.
  • 2026-03-03: Yash 2.61 is released; the manual version matches 2.61.

Related projects

  • dash and bash are common comparison points for POSIX shell behavior and scripting compatibility.
  • zsh and fish occupy the more feature-forward interactive shell space that yash partially overlaps but does not try to clone.
  • yash-rs is the upstream author's Rust reimplementation project for a future extended POSIX shell.

安全态势

风险级别:yellow

generalized runtime or code generation signal.

风险分类器

yellow 风险 · 中 置信度 · runtime

原因

  • generalized runtime or code generation signal

信号

  • text:shell

安装行为

  • 未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
$XDG_CONFIG_HOME/yash/profile~/.yash_profile$XDG_CONFIG_HOME/yash/rc~/.yashrc

可执行文件

已安装的可执行文件

命令类型暴露范围备注
yash可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-08-03
管理器版本2.61
管理器更新时间
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:yash
版本2.61
软件包管理器Homebrew
主页https://magicant.github.io/yash/
仓库https://github.com/magicant/yash
Bottle未记录
服务未声明

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation