Automic VaultAutomic Vault

brew

checkpwn mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für checkpwn in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install checkpwn

local Homebrew formula metadata

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#checkpwn

nixpkgs package indexes · pkgs/by-name/ch/checkpwn/package.nix · Quelle: api.github.com

Überblick

Paketzusammenfassung

Check Have I Been Pwned and see if it's time for you to change passwords

Befehle und Aliase

  • checkpwn

Verlauf

Projektgeschichte und Nutzung

checkpwn is a Rust CLI for querying Have I Been Pwned account, paste, and password-breach data. It is small, but source-backed enough to document as a package-manager convenience wrapper around a security API.

Projektgeschichte

The brycx/checkpwn repository was created in May 2018. The README describes checkpwn as a tool to check Have I Been Pwned and determine whether passwords need changing.

The Cargo metadata identifies it as a command-line utility with password, security, and HIBP keywords. The project continued to receive releases through 0.6.0 in March 2026, when it moved to Rust Edition 2024 and updated dependencies.

Adoptionsgeschichte

The README documents installation through Cargo and Homebrew, while the batch metadata also lists Nix. This is typical adoption for a focused Rust CLI: cargo install first, then package-manager formulas for repeatable workstation setup.

Adoption appears niche rather than ecosystem-defining, with modest GitHub star counts, but the tool solves a clear packageable task: local HIBP checks without writing API glue.

Wie es verwendet wird

Users register a Have I Been Pwned API key with checkpwn register, which writes checkpwn.yml in the user's configuration directory, then use checkpwn acc for accounts or lists and checkpwn pass for passwords.

For account checks, the README says checkpwn queries both the HIBP paste and account databases. Password checking is separated from account checking, matching the common operational distinction between exposed accounts and compromised password material.

Warum Paket-Nerds sich dafür interessieren

checkpwn is package-nerd interesting as a compact Rust security CLI with Cargo, Homebrew, and Nix distribution. It shows the pattern of wrapping a popular web security service in a local command that stores minimal configuration and can be scripted.

Its config-path behavior also matters to packagers because API keys are user state, not package state.

Zeitleiste

  • 2018: brycx/checkpwn repository created.
  • 2020: 0.5.1 release published.
  • 2022: 0.5.4 release published.
  • 2026: 0.6.0 released with Rust Edition 2024.

Related projects

  • Have I Been Pwned is the upstream breach-data service that checkpwn queries.
  • checkpwn_lib is the Rust library dependency used by the CLI according to Cargo metadata.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Linux
$XDG_CONFIG_HOME/checkpwn/checkpwn.yml~/.config/checkpwn/checkpwn.yml
macOS
~/Library/Application Support/checkpwn/checkpwn.yml
Windows
%APPDATA%\checkpwn\checkpwn.yml

Credential files

Credential-bearing paths to review before unattended agent runs.

Linux
$XDG_CONFIG_HOME/checkpwn/checkpwn.yml~/.config/checkpwn/checkpwn.yml
macOS
~/Library/Application Support/checkpwn/checkpwn.yml
Windows
%APPDATA%\checkpwn\checkpwn.yml

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
checkpwncliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version0.6.0
Manager aktualisiert
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://github.com/brycx/checkpwn

  • InfoNo package-manager update timestamp was available.niedrig Konfidenz
  • InfoNo cached GitHub release or tag data was available.https://github.com/brycx/checkpwnnone Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:checkpwn
Version0.6.0
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/checkpwn
Homepagehttps://github.com/brycx/checkpwn
Repositoryhttps://github.com/brycx/checkpwn
Upstream-Dokumentationhttps://github.com/brycx/checkpwn#readme
LizenzMIT
Quellarchivhttps://static.crates.io/crates/checkpwn/checkpwn-0.6.0.crate
Build-Abhängigkeitenrust
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecheckpwn
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

checkpwn

nix profile install nixpkgs#checkpwn
  • normalized package name match
  • Abgeglichen nach: Checkpwn
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ch/checkpwn/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • rustBuild dependency declared by Homebrew.

Gleicher Workflow

  • name-that-hashShares av.db curated category or tags: cli, passwords, security.
  • passwdqcShares av.db curated category or tags: cli, passwords, security.
  • cracklibShares av.db curated category or tags: cli, passwords, security.
  • crunchShares av.db curated category or tags: cli, passwords, security.
  • dicewareShares av.db curated category or tags: cli, passwords, security.
  • pwgenShares av.db curated category or tags: cli, passwords, security.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment