Automic VaultAutomic Vault

brew

Install dnscrypt-wrapper with Homebrew, apk, pacman

Server-side proxy that adds dnscrypt support to name resolvers. Version 0.4.2 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install dnscrypt-wrapper

local Homebrew formula metadata

overview

Package summary

Server-side proxy that adds dnscrypt support to name resolvers

Commands and aliases

  • dnscrypt-wrapper

history

Project history and usage

dnscrypt-wrapper is the server-side companion to DNSCrypt client tools: it wraps an existing recursive or authoritative DNS service so that clients can speak DNSCrypt to it.

Project history

The project describes itself as a server-side proxy that adds DNSCrypt support to name resolvers. Instead of replacing resolvers such as Unbound, BIND, or PowerDNS Recursor, it was designed to sit in front of them and handle the DNSCrypt layer.

Its documentation and repository identify it with the earlier DNSCrypt server ecosystem, including key generation, provider names, and a wrapper process around a conventional DNS backend. That makes it a smaller, more specialized counterpart to dnscrypt-proxy.

Adoption history

dnscrypt-wrapper reached package-manager visibility in Homebrew, Alpine, and Arch-style packaging, but it never had the broad desktop/client adoption of dnscrypt-proxy. Its audience is operators who want to publish a DNSCrypt-capable resolver rather than users who only want to consume one.

How it is used

Operators use dnscrypt-wrapper when they already run a DNS resolver and want to expose a DNSCrypt endpoint. The package is therefore configured around server keys, certificates, provider names, listen addresses, and forwarding to the local resolver.

Why package nerds care

For package history, dnscrypt-wrapper is interesting because it packages the other side of the DNSCrypt protocol. It shows how early encrypted-DNS tooling needed both client daemons and server wrappers before encrypted transport was folded into larger resolver projects.

Timeline

  • 2012-2015: The public project documentation and copyright range cover the early DNSCrypt server-wrapper era.
  • 2010s: The package becomes available through Homebrew and Linux packaging for operators running DNSCrypt-capable resolvers.

Related projects

  • Related projects include dnscrypt-proxy for clients, Unbound, BIND, and PowerDNS Recursor as wrapped DNS backends, and dnsdist for DNS load balancing in front of resolver fleets.

security posture

Risk level: blue

broad file, network, media, or database tool signal.

Risk classifier

blue risk · medium confidence · tool

Why

  • broad file, network, media, or database tool signal

Signals

  • text:server

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 8 platform targets.
  • Installs with 2 runtime dependencies.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
dnscrypt-wrappercliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.4.2
manager updated
local dataok
upstreamcurrent
latest detectedv0.4.2

https://github.com/cofyc/dnscrypt-wrapper

  • infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package keybrew:dnscrypt-wrapper
Version0.4.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/dnscrypt-wrapper
Homepagehttps://cofyc.github.io/dnscrypt-wrapper/
Repositoryhttps://github.com/cofyc/dnscrypt-wrapper
Upstream docshttps://cofyc.github.io/dnscrypt-wrapper
LicenseISC
Source archivehttps://github.com/cofyc/dnscrypt-wrapper/archive/refs/tags/v0.4.2.tar.gz
Dependencieslibevent, libsodium
Build dependenciesautoconf
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namednscrypt-wrapper
Version Scheme0
Revision2
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

apk95%

dnscrypt-wrapper 0.4.2-r3

dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver

https://github.com/Cofyc/dnscrypt-wrapper

sudo apk add dnscrypt-wrapper
  • License: MIT
  • Architecture: x86_64
  • Source Package: dnscrypt-wrapper
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Dnscrypt Wrapper
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dnscrypt-wrapper from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
pacman95%

dnscrypt-wrapper 0.4.2-5

A server-side dnscrypt proxy

https://dnscrypt.org/

sudo pacman -S dnscrypt-wrapper
  • License: BSD
  • Architecture: x86_64
  • 2 dependencies
  • normalized package name match
  • Matched by: Dnscrypt Wrapper
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: dnscrypt-wrapper from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • libeventRuntime dependency declared by Homebrew.
  • autoconfBuild dependency declared by Homebrew.

Same workflow

  • dnscrypt-proxyShares av.db curated category or tags: cli, dns, dnscrypt, networking, privacy.
  • stubbyShares av.db curated category or tags: cli, dns, networking, privacy.
  • bindShares av.db curated category or tags: cli, dns, networking, server.
  • corednsShares av.db curated category or tags: cli, dns, networking, server.
  • ctrldShares av.db curated category or tags: cli, dns, networking, proxy.
  • hickory-dnsShares av.db curated category or tags: cli, dns, networking, server.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment