Automic VaultAutomic Vault

brew

Install cargo-sort with Homebrew, apk, Nix, pacman

Tool to check that your Cargo.toml dependencies are sorted alphabetically. Version 2.1.4 via Homebrew; verified 2026-04-26.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install cargo-sort

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add cargo-sort

Alpine Linux edge package indexes · cargo-sort · source: dl-cdn.alpinelinux.org

Nixverified · 92%
nix profile install nixpkgs#cargo-sort

nixpkgs package indexes · pkgs/by-name/ca/cargo-sort/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S cargo-sort

Arch Linux sync databases · cargo-sort · source: geo.mirror.pkgbuild.com

overview

Package summary

Tool to check that your Cargo.toml dependencies are sorted alphabetically

Commands and aliases

  • cargo-sort

history

Project history and usage

cargo-sort is a Rust Cargo subcommand for checking and sorting Cargo.toml dependency tables and related TOML tables.

Project history

The project README says cargo-sort was created as an implementation of David Tolnay's request-for-implementation issue for alphabetically sorting Cargo.toml dependencies, and that it uses toml-edit to parse TOML.

Adoption history

GitHub records the repository as created in June 2019, while crates.io records the cargo-sort crate as first published in May 2021. The input package facts list it in Homebrew, Alpine, Nix, and Arch packaging.

How it is used

The official README documents `cargo sort` as a cargo subcommand with default rewrite, check-only, print, workspace, custom table-order, grouped sorting, and `--config` modes.

Why package nerds care

cargo-sort matters to package maintainers because it turns Cargo.toml dependency ordering into a repeatable check, useful for CI and pre-commit workflows where noisy dependency diffs are annoying.

Timeline

  • 2019: GitHub repository created.
  • 2021: First crates.io release recorded.
  • 2026: crates.io records max_version 2.1.4.

Related projects

  • The README credits toml-edit as the TOML parser and links the original request-for-implementation issue.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
tomlfmt.toml

executables

Installed executables

CommandKindExposureNote
cargo-sortcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version2.1.4
manager updated2026-04-26
local dataok
upstreamcurrent
latest detectedv2.1.4

https://github.com/DevinR528/cargo-sort

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:cargo-sort
Version2.1.4
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/cargo-sort
Homepagehttps://github.com/devinr528/cargo-sort
Repositoryhttps://github.com/devinr528/cargo-sort
Upstream docshttps://github.com/DevinR528/cargo-sort#readme
LicenseApache-2.0 OR MIT
Source archivehttps://github.com/DevinR528/cargo-sort/archive/refs/tags/v2.1.4.tar.gz
Last updated2026-04-26T11:42:31Z
Pulseupdated
Build dependenciesrust
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecargo-sort
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

cargo-sort

nix profile install nixpkgs#cargo-sort
  • normalized package name match
  • Matched by: Cargo Sort
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ca/cargo-sort/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

cargo-sort 2.1.4-r0

Check if tables and items in a .toml file are lexically sorted

https://github.com/DevinR528/cargo-sort

sudo apk add cargo-sort
  • License: MIT OR Apache-2.0
  • Architecture: x86_64
  • Source Package: cargo-sort
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Cargo Sort
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cargo-sort from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman95%

cargo-sort 2.1.4-1

Check if tables and items in a .toml file are lexically sorted

https://github.com/DevinR528/cargo-sort

sudo pacman -S cargo-sort
  • License: Apache-2.0 AND MIT
  • Architecture: x86_64
  • 2 dependencies
  • normalized package name match
  • Matched by: Cargo Sort
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: cargo-sort from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • rustBuild dependency declared by Homebrew.
  • cargo-shearPackage names and metadata indicate a similar tool family. Shared terms: cargo, cargo-toml, dependencies, toml.
  • cargo-udepsPackage names and metadata indicate a similar tool family. Shared terms: cargo, cargo-toml, dependencies, toml.

Same workflow

  • cargo-sortSame normalized package name exists in another local package ecosystem.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment