install

Additional install commands

macOS

Homebrewverified · 100%

brew install anchor

local Homebrew formula metadata

Linux

Nixverified · 92%

nix profile install nixpkgs#anchor

nixpkgs package indexes · pkgs/by-name/an/anchor/package.nix · source: api.github.com

overview

Package summary

Solana Program Framework

Project links

Commands and aliases

anchor

history

Project history and usage

Anchor is the Solana Program Framework: a Rust-oriented framework, CLI, IDL system, and client-generation toolchain for building Solana programs. The upstream README calls it the most popular framework for Solana programs.

Project history

The public repository was created in January 2021 and describes Anchor as a Solana program framework. Its README lists the major pieces: a Rust eDSL for Solana programs, an IDL specification, a TypeScript package for generated clients, and a CLI for workspace management.

Anchor grew around the full development lifecycle rather than just macros. The docs cover installation, `anchor init`, `anchor build`, `anchor test`, deployment, IDL commands, clients, local validators, and `Anchor.toml` workspace configuration.

The project moved under the Solana Foundation repository namespace while retaining official docs at anchor-lang.com. The latest GitHub release observed for this batch is v1.1.2, published in June 2026.

Adoption history

Anchor's adoption tracks Solana application development: it gives Rust program authors a higher-level account model, generated IDLs, generated TypeScript and Rust client workflows, and a project layout familiar to developers coming from contract frameworks in other ecosystems.

The README explicitly compares the high-level flow to Ethereum tooling such as Solidity, Truffle, and web3.js while noting that Anchor's DSL targets Solana. Official package tables show Anchor components published through crates.io and npm, while the supplied package facts show the CLI available through Homebrew and Nix.

How it is used

Typical usage starts with `anchor init`, then `anchor build`, `anchor test`, and `anchor deploy`. The CLI builds workspace programs for Solana's BPF runtime, emits IDLs under `target/idl`, runs integration tests, and deploys configured programs.

`Anchor.toml` is the central project configuration file. The local-development docs show it specifying clusters and a wallet path such as `~/.config/solana/id.json`, and the CLI docs say commands are configured from the workspace's `Anchor.toml`.

Why package nerds care

Anchor is significant because it turns a blockchain program into a packageable workspace with a CLI, generated interface files, client packages, and repeatable build/test/deploy commands.

For package managers, the `anchor` command is only one visible edge of a larger toolchain: crates, npm packages, Solana CLI compatibility, AVM, local validator behavior, and project config all need to line up.

Timeline

2021: Public repository created.
2021-2020s: Anchor becomes a standard framework for Solana program development.
2026: Release v1.1.2 published.
Current docs: Anchor CLI, Anchor.toml, TypeScript/Rust clients, testing, and deployment are documented at anchor-lang.com.

Related projects

Solana CLI: required command-line tooling for Solana development.
AVM: Anchor Version Manager, recommended by upstream installation docs.
anchor-lang, anchor-spl, and anchor-client: Rust crates published as part of the Anchor ecosystem.
@anchor-lang/core and @anchor-lang/cli: npm packages listed by upstream for TypeScript/client and CLI workflows.

Sources

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

narrow executable package without higher-risk signals

Signals

metadata:no-higher-risk-signals

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Installs with 1 runtime dependencies.
Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: Anchor.toml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.config/solana/id.json

executables

Installed executables

Command	Kind	Exposure	Note
`anchor`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version1.1.2

manager updated2026-07-04

local dataok

upstreamcurrent

latest detectedv1.1.2

https://github.com/otter-sec/anchor

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:anchor
Version	1.1.2
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/anchor
Homepage	https://anchor-lang.com
Repository	https://github.com/otter-sec/anchor
Upstream docs	https://www.anchor-lang.com/docs
License	Apache-2.0
Source archive	https://github.com/otter-sec/anchor/archive/refs/tags/v1.1.2.tar.gz
Last updated	2026-07-04T16:53:41+09:00
Pulse	updated
Dependencies	rust
Build dependencies	pkgconf
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	anchor
Version Scheme	0
Revision	0
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

anchor

nix profile install nixpkgs#anchor

normalized package name match
Matched by: Anchor

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/an/anchor/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/anchor.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install anchor with Homebrew, Nix