Automic VaultAutomic Vault

brew

Install hatch with Homebrew, apk, dnf, MacPorts, Nix, scoop, winget

Modern, extensible Python project management. Version 1.17.0 via Homebrew; verified 2026-06-03.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install hatch

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install hatch

MacPorts ports tree · python/hatch/Portfile · source: api.github.com

Windows

Scoopverified · 92%
scoop install main/hatch

Scoop official bucket manifest trees · bucket/hatch.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id PyPA.Hatch -e

Windows Package Manager source index · PyPA.Hatch · source: cdn.winget.microsoft.com

overview

Package summary

Modern, extensible Python project management

Commands and aliases

  • hatch

history

Project history and usage

Hatch is a modern, extensible Python project manager under the PyPA organization. It packages project creation, build backend integration, environment management, testing, static analysis, versioning, publishing, Python distribution management, and script running behind one CLI.

Its history is tied to Python's move toward pyproject.toml-centered packaging. Hatch and Hatchling give package authors a standards-compliant build backend plus a workflow tool, making it a notable entry in the post-setup.py packaging era.

Project history

The Hatch history page records version 1.0.0 on 2022-04-28 as the first stable release of Hatch v1 and a complete rewrite. The adjacent Hatchling history records 0.24.0 on the same date as the initial public release of the Hatchling build system, establishing the split between the user-facing Hatch CLI and the build backend.

The 1.1.0 history entry says project metadata was updated to reflect adoption by PyPA and production stability. That matters historically because PyPA ownership placed Hatch among the packaging tools documented and maintained in the Python packaging ecosystem rather than as only an individual project.

Later history entries show Hatch broadening from packaging and environments into batteries-included project operations: publishing confirmation and index plugins, virtual-environment storage and plugin APIs, automatic Python distribution downloads, test commands, static analysis defaults, standalone binaries through PyApp, UV support, dependency groups, workspaces, and PEP 751 lockfile commands.

Adoption history

Hatch adoption came from Python projects that wanted a single pyproject.toml-native workflow for building, testing, versioning, environment scripts, and publishing. Its README presents standardized builds, reproducible builds by default, environment management, Python management, test execution, static analysis, script running, publishing, version management, and project generation as first-class features.

The build documentation emphasizes that Hatch complies with modern Python packaging specifications and that other tools can consume projects using Hatch as a build backend. This is central to adoption: projects can use Hatchling while still interoperating with pip, tox, cibuildwheel, PyPI, and other packaging tools.

Package-manager adoption reflects that dual role. Homebrew and other OS package managers distribute the hatch CLI, while Python packaging itself consumes Hatchling through build-system requirements in pyproject.toml.

How it is used

Typical CLI workflows include hatch new, hatch build, hatch publish, hatch version, hatch run, hatch env commands, hatch test, and Hatch-managed Python or environment operations. Configuration lives in user config files plus pyproject.toml or hatch.toml project tables.

As a build backend, Hatchling is declared in pyproject.toml with build-system.requires and build-backend. As a workflow manager, Hatch creates and runs named environments, executes scripts, builds distributions, and coordinates publishing without forcing all projects to abandon other tools in the packaging ecosystem.

Why package nerds care

Hatch is significant because it bundles several trends in Python packaging: pyproject.toml configuration, backend/front-end separation, reproducible builds, environment automation, plugin hooks, and standards-based metadata. It is not just a build backend and not just a virtualenv wrapper.

For package nerds, Hatchling's small build-backend role is as important as the hatch CLI. A project can depend on Hatchling for wheel and sdist creation while developers use Hatch for environments, scripts, tests, versions, and publishing.

The changelog also tracks the moving Python packaging target: Python version support drops, metadata version updates, SBOM support, dependency groups, UV integration, lockfiles, PyPI telemetry user agents, and workspace concepts all appear as the ecosystem evolves.

Timeline

  • 2022-04-28: Hatch 1.0.0 shipped as the first stable v1 release and complete rewrite; Hatchling 0.24.0 shipped as the initial public build-system release.
  • 2022-05-12: Hatch 1.1.0 updated project metadata to reflect PyPA adoption and production stability.
  • 2023: Hatch added and refined publishing, virtual environment behavior, build backend flexibility, automatic Python downloads, and plugin interfaces.
  • 2024: Hatch added a test command, UV support for virtual environments, official GitHub Action support, and Python distribution source controls.
  • 2025: Hatch 1.16.0 added workspace support inspired by Cargo Workspaces and dependency group support.
  • 2026: Hatch 1.17.0 added check commands, PEP 751 lockfile generation, dependency lock/sync commands, and pluggable dependency lockers.

Related projects

  • Hatchling is Hatch's build backend and is declared by projects through pyproject.toml.
  • PyPA is the Python Packaging Authority organization under which Hatch is maintained.
  • PyPI, pip, tox, cibuildwheel, virtualenv, UV, Ruff, PyApp, and Python packaging standards are recurring integration points in Hatch documentation and history.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for hatch. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 4 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

macOS
~/Library/Application Support/hatch/config.toml
Unix
$XDG_CONFIG_HOME/hatch/config.toml~/.config/hatch/config.toml
Windows
%USERPROFILE%\AppData\Local\hatch\config.toml

executables

Installed executables

CommandKindExposureNote
hatchcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.17.0
manager updated2026-06-03
local dataok
upstreamnot checked
latest detectednot detected

https://hatch.pypa.io/latest/

install metadata

Package metadata

Package keybrew:hatch
Version1.17.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/hatch
Homepagehttps://hatch.pypa.io/latest/
Repositoryhttps://github.com/pypa/hatch
Upstream docshttps://hatch.pypa.io/latest
LicenseMIT
Source archivehttps://files.pythonhosted.org/packages/e4/0c/7ae1ace8d19f36624cfbbffe227169d670805f8a50a20ce65a4be14c2924/hatch-1.17.0.tar.gz
Last updated2026-06-03T03:34:53Z
Pulseupdated
Dependenciescertifi, cryptography, python@3.14, uv
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namehatch
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

hatch

nix profile install nixpkgs#hatch
  • normalized package name match
  • Matched by: Hatch
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ha/hatch/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

hatch 1.16.3-r1

Modern, extensible Python project management

https://hatch.pypa.io/latest/

sudo apk add hatch
  • License: MIT
  • Architecture: x86_64
  • Source Package: hatch
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Hatch
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: hatch from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

hatch-pyc 1.16.3-r1

Precompiled Python bytecode for hatch

https://hatch.pypa.io/latest/

sudo apk add hatch-pyc
  • License: MIT
  • Architecture: x86_64
  • Source Package: hatch
  • 1 dependencies
  • normalized package name match
  • Matched by: Hatch
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: hatch-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
dnf95%

hatch 1.17.0-2.fc45

A modern project, package, and virtual env manager

https://github.com/pypa/hatch

sudo dnf install hatch
  • License: MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: hatch
  • 4 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Hatch
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: hatch from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
MacPorts95%

hatch

sudo port install hatch
  • normalized package name match
  • Matched by: Hatch
MacPorts ports tree · api.github.com · MacPorts ports tree: python/hatch/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/hatch

scoop install main/hatch
  • normalized package name match
  • Matched by: Hatch
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/hatch.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

PyPA.Hatch

winget install --id PyPA.Hatch -e
  • normalized package name match
  • Matched by: Hatch
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: PyPA.Hatch from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • python@3.14Runtime dependency declared by Homebrew.
  • uvRuntime dependency declared by Homebrew.

Same workflow

  • poetryShares av.db curated category or tags: cli, developer-tools, packaging, python, virtual-environments.
  • abi3auditShares av.db curated category or tags: cli, developer-tools, packaging, python.
  • flitShares av.db curated category or tags: cli, developer-tools, packaging, python.
  • pdmShares av.db curated category or tags: cli, developer-tools, packaging, python.
  • pipxShares av.db curated category or tags: cli, developer-tools, python, virtual-environments.
  • ryeShares av.db curated category or tags: cli, developer-tools, project-management, python.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment