Automic VaultAutomic Vault

brew

Install buffrs with Homebrew, Nix

Modern protobuf package management. Version 0.13.3 via Homebrew; verified 2026-06-03.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install buffrs

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#buffrs

nixpkgs package indexes · pkgs/by-name/bu/buffrs/package.nix · source: api.github.com

overview

Package summary

Modern protobuf package management

Commands and aliases

  • buffrs

history

Project history and usage

Buffrs is a Rust CLI for package-based Protocol Buffers distribution, designed around manifests, lock files, registry login, dependency installation, packaging, and publishing.

Project history

Helsing created Buffrs to address a Protobuf distribution problem: raw `.proto` files are language-independent, but sharing them between projects often becomes ad hoc vendoring or generated-code publication. Buffrs treats Protobuf schemas as first-class packages.

The README and book describe a package-manager workflow with `Proto.toml` manifests, recursive local dependencies, workspaces, Artifactory integration, reproducible lock files, and planned self-hosted registry work.

Adoption history

Buffrs has a focused adoption profile: it is available through Cargo, Homebrew, and Nix, and its own documentation highlights Artifactory-backed registries rather than a large public central registry. That makes it most relevant to organizations managing internal Protobuf APIs.

Its public roadmap shows the project evolving from package manifests and Artifactory distribution toward additional Protobuf tooling such as bindgen, linting, validation, and formatting.

How it is used

The documented quickstart is `buffrs login`, `buffrs init --api`, `buffrs add <dependency>`, and `buffrs install`. The CLI also supports creating packages, linting, removing dependencies, packaging, publishing, listing managed protobuf files, and lockfile operations.

`Proto.toml` is the project manifest. Credentials are stored under `~/.buffrs/credentials.toml` according to the existing curation.

Why package nerds care

Buffrs is package-nerd bait because it applies familiar package-manager primitives, manifests, lock files, registry login, dependency graphs, checksums, and publish/install commands, to raw Protobuf schema files.

It overlaps conceptually with Buf modules but comes from a Rust/Helsing tooling angle and explicitly supports Artifactory-backed package distribution.

Timeline

  • 2020s: Helsing announced Buffrs as a package manager for Protocol Buffers.
  • 2020s: The README documented support for project manifests, dependency declaration, Artifactory package distribution, tonic generation, and protoc generation.
  • 2020s: The roadmap listed a future self-hostable S3-based `buffrs-registry` and additional Protobuf tooling.

Related projects

  • Buf is the neighboring Protobuf module and registry ecosystem.
  • `protoc` and tonic are documented Buffrs generation backends.
  • Artifactory is a supported registry backend for publishing and consuming Buffrs packages.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
Proto.toml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.buffrs/credentials.toml

executables

Installed executables

CommandKindExposureNote
buffrscliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.13.3
manager updated2026-06-03
local dataok
upstreamcurrent
latest detectedv0.13.3

https://github.com/helsing-ai/buffrs

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:buffrs
Version0.13.3
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/buffrs
Homepagehttps://github.com/helsing-ai/buffrs
Repositoryhttps://github.com/helsing-ai/buffrs
Upstream docshttps://docs.rs/buffrs
LicenseApache-2.0
Source archivehttps://github.com/helsing-ai/buffrs/archive/refs/tags/v0.13.3.tar.gz
Last updated2026-06-03T18:40:32Z
Pulseupdated
Build dependenciesrust
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebuffrs
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

buffrs

nix profile install nixpkgs#buffrs
  • normalized package name match
  • Matched by: Buffrs
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bu/buffrs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment