Automic VaultAutomic Vault

brew / 保護ツール対応 / 順位 2294

twine をインストール

twine のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

インストール

Automic Vault でインストール

Automic Vault
AV をダウンロード
sudo av install brew:twine

macOS

Homebrewverified · 100%
brew install twine

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install twine

MacPorts ports tree · python/twine/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add twine

Alpine Linux edge package indexes · twine · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install twine

Debian stable package indexes · twine · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install twine

Fedora Rawhide package metadata · twine · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#twine

nixpkgs package indexes · twine · source: raw.githubusercontent.com

Arch Linux pacmanverified · 92%
sudo pacman -S twine

Arch Linux sync databases · twine · source: geo.mirror.pkgbuild.com

Windows

Scoopverified · 92%
scoop install extras/twine

Scoop official bucket manifest trees · bucket/twine.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id ChrisKlimas.Twine -e

Windows Package Manager source index · ChrisKlimas.Twine · source: cdn.winget.microsoft.com

プラットフォームノート

  • パッケージ固有のプラットフォームノートはありません。

概要

パッケージ概要

Utilities for interacting with PyPI

コマンドとエイリアス

  • twine

保護ツール対応

Plain Text Python Package Index Credentials

Twine reads repository credentials from ~/.pypirc by default, and that file can contain plaintext passwords or API tokens for PyPI-compatible package indexes. Our isotope migrates a single repository credential to Twine's native TWINE_* environment variables in the macOS keychain, removes the secret from the persisted .pypirc, and injects only those environment variables while `twine` runs.

Risk classifier

green risk · low confidence · appliance

Why

  • no executable entrypoint in the package index

Signals

  • metadata:no-indexed-executables

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 2 runtime dependencies.
  • Build metadata lists 1 build dependencies.

ローカル README 抜粋

protected tool:twine

Twine reads Python package index credentials from ~/.pypirc by default. That file can contain plaintext repository passwords or API tokens.

This protected-tool coverage migrates a single default .pypirc repository credential into Automic Vault storage as Twine's native TWINE_* environment variables, sanitizes local password-bearing entries, and wraps twine so only those environment variables are injected while Twine runs.

Migrated Data

  • one ~/.pypirc repository section containing password = ...
  • one repository URL in ~/.pypirc that embeds userinfo

Caveats

  • Only the default ~/.pypirc path is migrated.
  • .pypirc files with credentials for multiple repositories must be migrated

manually.

  • Custom repository sections need a repository URL and, unless they target

PyPI/TestPyPI, a username.

  • Environment variables such as TWINE_PASSWORD are not migrated.
  • Direct execution of the original binary will not receive credentials.

ソース: local coverage notes

カバレッジソース

ソース抜粋

Caveats

  • We currently migrate only the default ~/.pypirc file.
  • .pypirc files with credentials for multiple repositories must be migrated manually because one TWINE_* environment set cannot represent every target.
  • Custom repository sections must include a repository URL and, unless they target the default PyPI/TestPyPI upload endpoints, a username.
  • TWINE_PASSWORD and other environment-provided credentials are not migrated.
  • Direct execution of the original binary will not receive credentials.

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
twinecliglobal executable

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-06-10
マネージャ版6.2.0
マネージャ更新日2026-05-15
ローカルデータok
上流not checked
検出された最新not detected

https://github.com/pypa/twine

インストールメタデータ

パッケージメタデータ

Package keybrew:twine
Version6.2.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/twine
Homepagehttps://github.com/pypa/twine
Repositoryhttps://github.com/pypa/twine
Upstream docshttps://twine.readthedocs.io/en/stable
LicenseApache-2.0
Source archivehttps://files.pythonhosted.org/packages/e0/a8/949edebe3a82774c1ec34f637f5dd82d1cf22c25e963b7d63771083bbee5/twine-6.2.0.tar.gz
Last updated2026-05-15T11:13:54Z
Pulseupdated
Dependenciescertifi, python@3.14
Build dependenciesrust
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nametwine
Version Scheme0
Revision6
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

twine 6.1.0-1

utility for interacting with PyPI

https://github.com/pypa/twine

sudo apt install twine
  • Section: utils
  • Architecture: all
  • 12 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Twine
Debian stable package indexes · deb.debian.org · Debian stable package indexes: twine from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

twine

nix profile install nixpkgs#twine
  • normalized package name match
  • Matched by: Twine
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: twine from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
Ubuntu apt95%

twine 5.0.0-1

utility for interacting with PyPI

https://github.com/pypa/twine

sudo apt install twine
  • Section: universe/utils
  • Architecture: all
  • 11 dependencies
  • normalized package name match
  • Matched by: Twine
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: twine from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

twine 6.1.0-r1

Collection of utilities for publishing packages on PyPI

https://twine.readthedocs.io/en/latest/

sudo apk add twine
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: twine
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Twine
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: twine from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

twine-pyc 6.1.0-r1

Precompiled Python bytecode for twine

https://twine.readthedocs.io/en/latest/

sudo apk add twine-pyc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: twine
  • 1 dependencies
  • normalized package name match
  • Matched by: Twine
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: twine-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

twine 6.2.0-6.fc44

Twine is a utility for publishing Python packages on PyPI

https://github.com/pypa/twine

sudo dnf install twine
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: python-twine
  • 3 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Twine
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: twine from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
pacman95%

twine 6.2.0-3

Collection of utilities for interacting with PyPI

https://github.com/pypa/twine/

sudo pacman -S twine
  • License: Apache-2.0
  • Architecture: any
  • 11 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Twine
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: twine from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

twine

sudo port install twine
  • normalized package name match
  • Matched by: Twine
MacPorts ports tree · api.github.com · MacPorts ports tree: python/twine/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

extras/twine

scoop install extras/twine
  • normalized package name match
  • Matched by: Twine
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/twine.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1
winget95%

ChrisKlimas.Twine

winget install --id ChrisKlimas.Twine -e
  • normalized package name match
  • Matched by: Twine
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: ChrisKlimas.Twine from https://cdn.winget.microsoft.com/cache/source.msix

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

関連ツール

  • python@3.14Runtime dependency declared by Homebrew.
  • rustBuild dependency declared by Homebrew.

同じワークフロー

  • poetryShares av.db curated category or tags: cli, developer-tools, package-management, packaging, python.
  • pdmShares av.db curated category or tags: cli, developer-tools, package-management, packaging, python.
  • grayskullShares av.db curated category or tags: cli, developer-tools, package-management, packaging, python.
  • uvShares av.db curated category or tags: cli, developer-tools, package-management, python.
  • pipxShares av.db curated category or tags: cli, developer-tools, package-management, python.
  • conanShares av.db curated category or tags: cli, developer-tools, package-management, python.

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest