Automic VaultAutomic Vault

brew

Install gup with Homebrew, Nix, winget

Update binaries installed by go install. Version 1.7.1 via Homebrew; verified 2026-06-26.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install gup

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#gup

nixpkgs package indexes · pkgs/by-name/gu/gup/package.nix · source: api.github.com

Windows

Windows Package Managerverified · 92%
winget install --id nao1215.gup -e

Windows Package Manager source index · nao1215.gup · source: cdn.winget.microsoft.com

overview

Package summary

Update binaries installed by go install

Commands and aliases

  • gup

history

Project history and usage

gup is a Go command-line tool that manages binaries installed into `$GOBIN` or `$GOPATH/bin`, filling the gap between `go install` as an installer and the day-to-day need to list, update, pin, export, import, remove, and migrate global Go tools.

Project history

The repository was created in February 2022 and an early v0.7.0 release was published in March 2022. The README frames the project around a specific Go packaging pain point: `go install` places binaries in the user's Go binary directory but does not keep a manifest or provide update management.

Over time, gup grew beyond parallel updates into a small toolset manager. Its README documents pinning exact versions, exporting and importing a `gup.json` tool manifest, migrating tools to a new binary directory, JSON output for automation, and release integrity metadata such as signed checksums, SBOMs, and build provenance.

Adoption history

The README documents installation through Homebrew, WinGet, mise, Nix, aqua, release packages, release binaries, and `go install`, showing that gup is packaged both as a Go-native tool and as an OS/package-manager utility.

Its adoption is tied to the Go module era, where many developers install developer tools with `go install module@version` but still want package-manager-like operations over the resulting binaries.

How it is used

Typical usage is `gup update` to update every managed binary, `gup check` to report available updates, `gup list` to show installed command metadata, `gup pin` and `gup unpin` to control versions, and `gup export` or `gup import` to reproduce a tool set.

The `gup.json` manifest matters for packaging culture because it gives global Go tools a portable inventory that `go install` itself does not maintain.

Why package nerds care

gup is package-nerd catnip because it treats `$GOBIN` like a lightweight package database without trying to replace Go's module installer. It adds just enough inventory, version selection, and parallel update behavior around existing Go commands.

It also highlights the difference between language-level installers and system package managers: `go install` can build a binary, but tools like gup provide the maintenance loop users expect from package managers.

Timeline

  • 2022: GitHub repository created.
  • 2022: v0.7.0 release published.

Related projects

  • The Go command provides the `go install` behavior that gup wraps.
  • aqua, mise, Nix, Homebrew, and WinGet are documented installation paths.
  • Tools such as gopls, golangci-lint, and lazygit are representative binaries users manage under `$GOBIN`.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
gup.json

executables

Installed executables

CommandKindExposureNote
gupcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.7.1
manager updated2026-06-26
local dataok
upstreamcurrent
latest detectedv1.7.1

https://github.com/nao1215/gup

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:gup
Version1.7.1
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/gup
Homepagehttps://github.com/nao1215/gup
Repositoryhttps://github.com/nao1215/gup
Upstream docshttps://github.com/nao1215/gup#readme
LicenseApache-2.0
Source archivehttps://github.com/nao1215/gup/archive/refs/tags/v1.7.1.tar.gz
Last updated2026-06-26T12:32:11Z
Pulseupdated
Dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namegup
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

gup

nix profile install nixpkgs#gup
  • normalized package name match
  • Matched by: Gup
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/gu/gup/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
winget95%

nao1215.gup

winget install --id nao1215.gup -e
  • normalized package name match
  • Matched by: Gup
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: nao1215.gup from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • goRuntime dependency declared by Homebrew.

Same workflow

  • voltShares av.db curated category or tags: cli, developer-tools, go, package-management.
  • akkuShares av.db curated category or tags: cli, developer-tools, package-management.
  • bowerShares av.db curated category or tags: cli, developer-tools, package-management.
  • brew-gemShares av.db curated category or tags: cli, developer-tools, package-management.
  • cabal-installShares av.db curated category or tags: cli, developer-tools, package-management.
  • cargo-binstallShares av.db curated category or tags: cli, developer-tools, package-management.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment