Automic VaultAutomic Vault

brew

Install dum with Homebrew, apk, Nix, scoop

Npm scripts runner written in Rust. Version 0.1.20 via Homebrew; verified from local package data.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install dum

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add dum

Alpine Linux edge package indexes · dum · source: dl-cdn.alpinelinux.org

Nixverified · 92%
nix profile install nixpkgs#dum

nixpkgs package indexes · pkgs/by-name/du/dum/package.nix · source: api.github.com

Windows

Scoopverified · 92%
scoop install main/dum

Scoop official bucket manifest trees · bucket/dum.json · source: api.github.com

overview

Package summary

Npm scripts runner written in Rust

Commands and aliases

  • dum

history

Project history and usage

dum is a small Rust command-line tool that targets a very specific Node.js workflow: running package.json scripts and node_modules binaries faster than invoking npm run or npx.

Project history

The project appeared in late 2021 as an experiment by EGOIST to learn Rust while replacing npm run and npx with a native executable. Its README frames the project around startup latency and includes a hyperfine benchmark comparing dum against npm run.

Adoption history

dum stayed a niche developer-tool package, but it gained enough packaging interest to appear beyond Cargo and GitHub releases, including Homebrew, Scoop, Nix, Alpine packaging, and the Arch AUR. Crates.io and Homebrew metadata show continued releases through the 0.1.x line rather than a large ecosystem.

How it is used

Typical use is inside JavaScript and TypeScript repositories: `dum build`, `dum test`, or `dum <bin>` to run package scripts and project-local executables. It also forwards install/add/remove commands to the detected package manager by checking lock files.

Why package nerds care

dum is interesting as part of the post-2020 wave of native, low-latency JavaScript tooling. It does not replace npm, pnpm, or Yarn as a package manager; its significance is as a tiny command shim that packages the speed argument into a Homebrew/Cargo-installable binary.

Timeline

  • 2021: GitHub repository and crates.io package are created.
  • 2021: v0.1.2 is published on GitHub Releases.
  • 2025: v0.1.20 is published and packaged as Homebrew stable 0.1.20.

Related projects

  • Related tools include npm run, npx, Yarn, pnpm, Bun, and other native JavaScript-development CLIs focused on reducing command startup overhead.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 8 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
dumcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.1.20
manager updated
local dataok
upstreamcurrent
latest detectedv0.1.20

https://github.com/egoist/dum

  • infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package keybrew:dum
Version0.1.20
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/dum
Homepagehttps://github.com/egoist/dum
Repositoryhttps://github.com/egoist/dum
Upstream docshttps://github.com/egoist/dum#readme
LicenseMIT
Source archivehttps://github.com/egoist/dum/archive/refs/tags/v0.1.20.tar.gz
Build dependenciesrust
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namedum
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

dum

nix profile install nixpkgs#dum
  • normalized package name match
  • Matched by: Dum
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/du/dum/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

dum 0.1.20-r1

An npm scripts runner written in Rust

https://github.com/egoist/dum

sudo apk add dum
  • License: MIT
  • Architecture: x86_64
  • Source Package: dum
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Dum
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dum from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
Scoop95%

main/dum

scoop install main/dum
  • normalized package name match
  • Matched by: Dum
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/dum.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment