Automic VaultAutomic Vault

brew

Install corral with Homebrew

Dependency manager for the Pony language. Version 0.9.2 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install corral

local Homebrew formula metadata

overview

Package summary

Dependency manager for the Pony language

Commands and aliases

  • corral

history

Project history and usage

Corral is the Pony language dependency manager. It manages Pony bundles with corral.json manifests, lock.json revision locks, a shared VCS repo cache, and a per-project dependency tree used to populate PONYPATH.

Project history

The official repository was created in 2017 and describes Corral as beta-level software. Its design notes explain the name as a deliberate sibling to Pony Stable: a corral is like a stable, but distinct enough to avoid confusion with the older Pony dependency tool.

Adoption history

Corral grew out of requirements work comparing Pony's needs with dependency managers in Go, Rust, and earlier Pony Stable workflows. Its design favors source-based dependencies, semver constraints, VCS locators, and checked-in lock files for reproducible Pony builds.

How it is used

A typical project runs corral init to create corral.json and lock.json, corral add to add a dependency, corral update to resolve and fetch dependencies, and corral run -- ponyc to compile with the resolved dependency directories on PONYPATH.

Why package nerds care

Corral is package-nerd material because it encodes a small-language dependency-management model: bundle-vs-package terminology, VCS-backed locators, transitive dependencies, lock files, and a separation between a shared repo cache and per-project checked-out dependency tree.

Timeline

  • 2017: Official GitHub repository created.
  • 2010s: Design documents compare Pony dependency management with Go, Rust, and Pony Stable approaches.
  • Present: README recommends ponyup for prebuilt binaries on Linux, macOS, and Windows.

Related projects

  • Related projects include Pony, ponyc, ponyup, Pony Stable, Go modules, Cargo, and other VCS-oriented dependency managers.

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • infrastructure mutation or orchestration signal

Signals

  • text:dependency manager

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
corral.jsonlock.json

executables

Installed executables

CommandKindExposureNote
corralcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.9.2
manager updated
local dataok
upstreamcurrent
latest detected0.9.2

https://github.com/ponylang/corral

  • infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package keybrew:corral
Version0.9.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/corral
Homepagehttps://github.com/ponylang/corral
Repositoryhttps://github.com/ponylang/corral
Upstream docshttps://github.com/ponylang/corral#readme
LicenseBSD-2-Clause
Source archivehttps://github.com/ponylang/corral/archive/refs/tags/0.9.2.tar.gz
Dependenciesponyc
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecorral
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • ponycRuntime dependency declared by Homebrew.

Same workflow

  • cargo-binstallShares av.db curated category or tags: cli, developer-tools, package-management.
  • composerShares av.db curated category or tags: cli, dependency-manager, developer-tools, package-management.
  • conanShares av.db curated category or tags: cli, dependency-manager, developer-tools, package-management.
  • egetShares av.db curated category or tags: cli, developer-tools, package-management.
  • install-peerdepsShares av.db curated category or tags: cli, developer-tools, package-management.
  • libsolvShares av.db curated category or tags: cli, developer-tools, package-management.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment