macOS
Homebrewverified · 100%
brew install ivylocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install ivyMacPorts ports tree · math/ivy/Portfile · source: api.github.com
brew
Install ivy with Homebrew, apt, dnf, MacPorts, Nix, zypper
Agile dependency manager. Version 2.5.3 via Homebrew; verified from local package data.
install
Additional install commands
Linux
Debian aptverified · 92%
sudo apt install ivyDebian stable package indexes · ivy · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install apache-ivyFedora Rawhide package metadata · apache-ivy · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#ivynixpkgs package indexes · pkgs/by-name/iv/ivy/package.nix · source: api.github.com
openSUSE zypperverified · 92%
sudo zypper install apache-ivyopenSUSE Tumbleweed package metadata · apache-ivy · source: download.opensuse.org
overview
Package summary
Agile dependency manager
Project links
Commands and aliases
- ivy
history
Project history and usage
Apache Ivy is a Java dependency manager associated with Apache Ant. It records, tracks, resolves, reports, and retrieves project dependencies while staying process-agnostic and configurable rather than imposing a full build lifecycle.
Project history
Ivy began outside Apache under Jayasoft; the Apache documentation still notes that the documentation was migrated from the old Jayasoft web site. The Apache Ivy home page records its October 2007 graduation as a subproject of Ant, followed by the 2.0.0 beta and release-candidate cycle.
The 2.0.0 release in January 2009 was the first non-beta Ivy release under Apache. The release notes highlight the move from Jayasoft Ivy to Apache Ivy, Java package renaming from fr.jayasoft to org.apache, the settings-file terminology change from configuration to settings, and a default resolver move toward Maven 2-compatible ibiblio repositories.
The 2.x line developed Ivy into a long-lived Ant companion. Apache's release history lists 2.1.0 in 2009, 2.2.0 in 2010, 2.3.0 in 2013, 2.4.0 in 2014, 2.5.0 in 2019, and maintenance releases in the 2.5 series.
Adoption history
Ivy's adoption came from Java projects that wanted transitive dependency resolution without moving the whole build to Maven. Its tight Ant integration let build.xml users add dependency resolution, reports, publishing, and retrieval while preserving existing Ant build structure.
The input package metadata shows Ivy packaged across Homebrew, Debian/Ubuntu, Fedora, MacPorts, Nix, and openSUSE. That broad packaging reflects its role as a build tool dependency for legacy and maintained Java build systems.
How it is used
Ivy projects usually declare dependencies in ivy.xml and customize repositories, resolvers, caches, namespaces, credentials, and other behavior through ivysettings.xml. It can run as Ant tasks or as a standalone application, with the cache and retrieval model separating dependency resolution from local artifact layout.
Ivy is most often compared with Maven dependency management: it can consume Maven-style metadata and repositories, but its package-nerd appeal is that it keeps dependency resolution independent from a prescribed project model.
Why package nerds care
Ivy matters historically because it represents a flexible, XML-configured answer to Java dependency hell during the Ant era. It is also a useful study in package-manager interoperability: Ivy files, Maven POMs, resolvers, repositories, caches, conflict managers, and generated reports are all explicit pieces of its model.
Timeline
- 2007: Ivy graduated as a subproject of Apache Ant.
- 2009: Apache Ivy 2.0.0 was released as the first non-beta Apache release.
- 2010: Apache Ivy 2.2.0 was made available.
- 2014: Apache Ivy 2.4.0 was made available.
- 2019: Apache Ivy 2.5.0 was made available.
- 2024: Apache Ivy 2.5.3 was made available.
Related projects
- Related projects include Apache Ant, Apache Maven, IvyDE for Eclipse, Maven-compatible repositories, ibiblio/Maven Central-style resolvers, and Java build systems that consume artifact metadata.
Sources
security posture
Risk level: orange
infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:dependency manager
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 1 platform targets.
- Installs with 1 runtime dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
ivysettings.xml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
ivy | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version2.5.3
manager updated
local dataok
upstreamnot checked
latest detectednot detected
- infoNo package-manager update timestamp was available.low confidence
- infoRelease/tag comparison is only available for GitHub repositories.https://ant.apache.org/ivy/none confidence
install metadata
Package metadata
| Package key | brew:ivy |
|---|---|
| Version | 2.5.3 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/ivy |
| Homepage | https://ant.apache.org/ivy/ |
| Repository | https://gitbox.apache.org/repos/asf/ant-ivy.git |
| Upstream docs | https://ant.apache.org/ivy |
| License | Apache-2.0 |
| Source archive | https://www.apache.org/dyn/closer.lua?path=ant/ivy/2.5.3/apache-ivy-2.5.3-bin.tar.gz |
| Dependencies | openjdk |
| Bottle | available (on all) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | ivy |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
ivy 2.5.3-1
agile dependency manager
sudo apt install ivy- Section: java
- Architecture: all
- 2 dependencies
- 7 optional deps
- normalized package name match
- Matched by: Ivy
Debian apt95%
ivy-doc 2.5.3-1
agile dependency manager (documentation)
sudo apt install ivy-doc- Section: doc
- Architecture: all
- Source Package: ivy
- 1 dependencies
- normalized package name match
- Matched by: Ivy
Nix95%
ivy
nix profile install nixpkgs#ivy- normalized package name match
- Matched by: Ivy
Ubuntu apt95%
ivy 2.5.2-1
agile dependency manager
sudo apt install ivy- Section: universe/libs
- Architecture: all
- 2 dependencies
- 7 optional deps
- normalized package name match
- Matched by: Ivy
Ubuntu apt95%
ivy-doc 2.5.2-1
agile dependency manager (documentation)
sudo apt install ivy-doc- Section: universe/doc
- Architecture: all
- Source Package: ivy
- 1 dependencies
- normalized package name match
- Matched by: Ivy
dnf95%
apache-ivy 2.5.2-6.fc42
Java-based dependency manager
sudo dnf install apache-ivy- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: apache-ivy
- 1 dependencies
- 4 provides
- normalized package name match
- Matched by: Ivy
zypper95%
apache-ivy 2.5.3-2.3
Java-based dependency manager
sudo zypper install apache-ivy- License: Apache-2.0
- Category: Development/Tools/Building
- Architecture: noarch
- Source Package: apache-ivy
- 3 dependencies
- 5 provides
- normalized package name match
- Matched by: Ivy
MacPorts95%
ivy
sudo port install ivy- normalized package name match
- Matched by: Ivy
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment