Automic VaultAutomic Vault

brew

commandbox mit Homebrew, scoop, winget installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für commandbox in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install commandbox

local Homebrew formula metadata

Windows

Scoopverifiziert · 92%
scoop install extras/commandbox

Scoop official bucket manifest trees · bucket/commandbox.json · Quelle: api.github.com

Windows Package Managerverifiziert · 92%
winget install --id Box.Box -e

Windows Package Manager source index · Box.Box · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

CFML embedded server, package manager, and app scaffolding tools

Verlauf

Projektgeschichte und Nutzung

CommandBox is Ortus Solutions' CFML-oriented command-line environment: a CLI, package manager, REPL, embedded server, scaffolding tool, and automation surface for ColdFusion and Box-family projects.

Projektgeschichte

The official manual describes CommandBox as a standalone native tool for Windows, macOS, and Linux, written in CFML and integrated with the Ortus Box ecosystem while remaining extensible for general CFML projects. Ortus also identifies it as open source under Apache 2.0.

Adoptionsgeschichte

CommandBox grew as infrastructure around modern CFML development: it integrates with ForgeBox for community package distribution, supports embedded CFML servers, and provides OS-specific installers and packages. The supplied package-manager metadata lists Homebrew, Scoop, and winget, showing that the tool is distributed through both Unix-like and Windows package-manager channels.

Wie es verwendet wird

Developers use the `box` executable to run shell commands, manage `box.json` packages, initialize and publish ForgeBox packages, start embedded CFML servers, scaffold applications, and automate workflows from native shells.

Warum Paket-Nerds sich dafür interessieren

CommandBox is significant because it brings npm-style package metadata and CLI workflows to the CFML ecosystem. Its `box.json` descriptor, ForgeBox publishing flow, Git/HTTP/SVN endpoint support, and cross-platform binary distribution make it a package manager as much as a developer shell.

Zeitleiste

  • 2010s: CommandBox emerged under Ortus Solutions as Project Gideon for CFML CLI, package, REPL, and embedded-server workflows.
  • 2017: Ortus site metadata shows the CommandBox product page in the modern products navigation.
  • 2020s: CommandBox documentation covers Homebrew, Windows installers, Linux packages, ForgeBox publishing, embedded servers, and task runners.
  • 2026: Official manual identifies current documentation as CommandBox 6.3.x.

Related projects

  • CommandBox is tied to ForgeBox, ColdBox, ContentBox, TestBox, Lucee, Adobe ColdFusion, and the wider Ortus Solutions Box ecosystem.

Sicherheitslage

Risikostufe: orange

infrastructure mutation or orchestration signal.

Risikoklassifikator

orange Risiko · mittel Konfidenz · infrastructure

Warum

  • infrastructure mutation or orchestration signal

Signale

  • text:package manager

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 1 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.CommandBox/CommandBox.json

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.CommandBox/CommandBox.json

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
boxcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-08
Manager-Version6.3.3
Manager aktualisiert2026-05-15
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://www.ortussolutions.com/products/commandbox

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:commandbox
Version6.3.3
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/commandbox
Homepagehttps://www.ortussolutions.com/products/commandbox
Repositoryhttps://github.com/Ortus-Solutions/commandbox
Upstream-Dokumentationhttps://apidocs.ortussolutions.com/commandbox/current
LizenzApache-2.0
Quellarchivhttps://downloads.ortussolutions.com/ortussolutions/commandbox/6.3.3/commandbox-bin-6.3.3.zip
Zuletzt aktualisiert2026-05-15T23:57:27Z
Pulseupdated
Abhängigkeitenopenjdk@21
Bottleverfügbar (auf all)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecommandbox
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Scoop95%

extras/commandbox

scoop install extras/commandbox
  • normalized package name match
  • Abgeglichen nach: Commandbox
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/commandbox.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1
winget92%

Box.Box

winget install --id Box.Box -e
  • installed executable or alias match
  • Abgeglichen nach: Box
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Box.Box from https://cdn.winget.microsoft.com/cache/source.msix

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment