Automic VaultAutomic Vault

brew / Protected-Tool-Abdeckung / Rang 2294

twine installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für twine in AI-Agent-Workflows.

Installation

Mit Automic Vault installieren

Automic Vault
sudo av install brew:twine

macOS

Homebrewverified · 100%
brew install twine

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install twine

MacPorts ports tree · python/twine/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add twine

Alpine Linux edge package indexes · twine · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install twine

Debian stable package indexes · twine · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install twine

Fedora Rawhide package metadata · twine · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#twine

nixpkgs package indexes · twine · source: raw.githubusercontent.com

Arch Linux pacmanverified · 92%
sudo pacman -S twine

Arch Linux sync databases · twine · source: geo.mirror.pkgbuild.com

Windows

Scoopverified · 92%
scoop install extras/twine

Scoop official bucket manifest trees · bucket/twine.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id ChrisKlimas.Twine -e

Windows Package Manager source index · ChrisKlimas.Twine · source: cdn.winget.microsoft.com

Plattformhinweise

  • Es waren keine paketspezifischen Plattformhinweise vorhanden.

Überblick

Paketzusammenfassung

Utilities for interacting with PyPI

Befehle und Aliase

  • twine

Protected-Tool-Abdeckung

Plain Text Python Package Index Credentials

Twine reads repository credentials from ~/.pypirc by default, and that file can contain plaintext passwords or API tokens for PyPI-compatible package indexes. Our isotope migrates a single repository credential to Twine's native TWINE_* environment variables in the macOS keychain, removes the secret from the persisted .pypirc, and injects only those environment variables while `twine` runs.

Risk classifier

green risk · low confidence · appliance

Why

  • no executable entrypoint in the package index

Signals

  • metadata:no-indexed-executables

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 2 runtime dependencies.
  • Build metadata lists 1 build dependencies.

Lokaler README-Auszug

protected tool:twine

Twine reads Python package index credentials from ~/.pypirc by default. That file can contain plaintext repository passwords or API tokens.

This protected-tool coverage migrates a single default .pypirc repository credential into Automic Vault storage as Twine's native TWINE_* environment variables, sanitizes local password-bearing entries, and wraps twine so only those environment variables are injected while Twine runs.

Migrated Data

  • one ~/.pypirc repository section containing password = ...
  • one repository URL in ~/.pypirc that embeds userinfo

Caveats

  • Only the default ~/.pypirc path is migrated.
  • .pypirc files with credentials for multiple repositories must be migrated

manually.

  • Custom repository sections need a repository URL and, unless they target

PyPI/TestPyPI, a username.

  • Environment variables such as TWINE_PASSWORD are not migrated.
  • Direct execution of the original binary will not receive credentials.

Quelle: local coverage notes

Quelle der Abdeckung

Quellauszug

Caveats

  • We currently migrate only the default ~/.pypirc file.
  • .pypirc files with credentials for multiple repositories must be migrated manually because one TWINE_* environment set cannot represent every target.
  • Custom repository sections must include a repository URL and, unless they target the default PyPI/TestPyPI upload endpoints, a username.
  • TWINE_PASSWORD and other environment-provided credentials are not migrated.
  • Direct execution of the original binary will not receive credentials.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
twinecliglobal executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-06-10
Manager-Version6.2.0
Manager aktualisiert2026-05-15
lokale Datenok
Upstreamnot checked
neueste erkannte Versionnot detected

https://github.com/pypa/twine

Installationsmetadaten

Paketmetadaten

Package keybrew:twine
Version6.2.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/twine
Homepagehttps://github.com/pypa/twine
Repositoryhttps://github.com/pypa/twine
Upstream docshttps://twine.readthedocs.io/en/stable
LicenseApache-2.0
Source archivehttps://files.pythonhosted.org/packages/e0/a8/949edebe3a82774c1ec34f637f5dd82d1cf22c25e963b7d63771083bbee5/twine-6.2.0.tar.gz
Last updated2026-05-15T11:13:54Z
Pulseupdated
Dependenciescertifi, python@3.14
Build dependenciesrust
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nametwine
Version Scheme0
Revision6
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

twine 6.1.0-1

utility for interacting with PyPI

https://github.com/pypa/twine

sudo apt install twine
  • Section: utils
  • Architecture: all
  • 12 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Twine
Debian stable package indexes · deb.debian.org · Debian stable package indexes: twine from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

twine

nix profile install nixpkgs#twine
  • normalized package name match
  • Matched by: Twine
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: twine from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
Ubuntu apt95%

twine 5.0.0-1

utility for interacting with PyPI

https://github.com/pypa/twine

sudo apt install twine
  • Section: universe/utils
  • Architecture: all
  • 11 dependencies
  • normalized package name match
  • Matched by: Twine
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: twine from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

twine 6.1.0-r1

Collection of utilities for publishing packages on PyPI

https://twine.readthedocs.io/en/latest/

sudo apk add twine
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: twine
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Twine
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: twine from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

twine-pyc 6.1.0-r1

Precompiled Python bytecode for twine

https://twine.readthedocs.io/en/latest/

sudo apk add twine-pyc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: twine
  • 1 dependencies
  • normalized package name match
  • Matched by: Twine
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: twine-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

twine 6.2.0-6.fc44

Twine is a utility for publishing Python packages on PyPI

https://github.com/pypa/twine

sudo dnf install twine
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: python-twine
  • 3 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Twine
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: twine from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
pacman95%

twine 6.2.0-3

Collection of utilities for interacting with PyPI

https://github.com/pypa/twine/

sudo pacman -S twine
  • License: Apache-2.0
  • Architecture: any
  • 11 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Twine
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: twine from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

twine

sudo port install twine
  • normalized package name match
  • Matched by: Twine
MacPorts ports tree · api.github.com · MacPorts ports tree: python/twine/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

extras/twine

scoop install extras/twine
  • normalized package name match
  • Matched by: Twine
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/twine.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1
winget95%

ChrisKlimas.Twine

winget install --id ChrisKlimas.Twine -e
  • normalized package name match
  • Matched by: Twine
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: ChrisKlimas.Twine from https://cdn.winget.microsoft.com/cache/source.msix

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest