Automic VaultAutomic Vault

brew

Install jadx with Homebrew, apk, Nix, pacman, scoop, winget

Dex to Java decompiler. Version 1.5.5 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install jadx

local Homebrew formula metadata

Windows

Scoopverified · 92%
scoop install extras/jadx

Scoop official bucket manifest trees · bucket/jadx.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id Skylot.jadx -e

Windows Package Manager source index · Skylot.jadx · source: cdn.winget.microsoft.com

overview

Package summary

Dex to Java decompiler

Commands and aliases

  • jadx
  • jadx-gui

history

Project history and usage

jadx is a Dex-to-Java decompiler for Android application artifacts. Its package identity is unusually clear: one install provides both a command-line decompiler and a desktop GUI for inspecting APK, DEX, AAR, AAB, ZIP, and related Android formats.

Project history

The public GitHub repository was created in March 2013 and describes the project as a Dex to Java decompiler. The README frames jadx around two surfaces, `jadx` for command-line workflows and `jadx-gui` for interactive reverse-engineering, with core features such as Dalvik bytecode decompilation, Android resource decoding, and deobfuscation.

Over time the project grew from a decompiler into a broader Android inspection workbench. The README documents syntax-highlighted browsing, jump-to-declaration, usage search, full-text search, and a smali debugger in the GUI, while release notes show continuing work on newer Android formats, Gradle export, plugin handling, malformed archive resistance, and DEX format changes.

Adoption history

jadx became a standard package-manager tool for Android reverse-engineering because it avoids the split between a GUI-only app and a scriptable decompiler. The project README lists package-manager installs through Arch Linux, Homebrew, and Flathub, and Homebrew API data available during this enrichment recorded 31,173 installs over 365 days.

Its high GitHub star count, release download badges, Maven Central badge for `jadx-core`, and separate `jadx-gui` workflow all point to adoption by both individual reverse engineers and Java tooling users who embed the decompiler library.

How it is used

Typical use is to point `jadx` or `jadx-gui` at an Android artifact and emit Java-like source, decoded resources, or a browsable project view. The README explicitly warns that decompilation is not perfect, which is part of the tool's practical culture: package users expect fast inspection and good-enough reconstruction rather than source recovery guarantees.

Why package nerds care

For package nerds, jadx is the Android decompiler that makes a Homebrew, Arch, Flatpak, or Windows package feel equivalent to a small reverse-engineering suite. It matters because it packages a Java/Android-specific workflow into predictable CLI and GUI entry points, while still exposing `jadx-core` for library use.

Timeline

  • 2013: GitHub repository created for the Dex-to-Java decompiler.
  • 2024: v1.5.1 release notes included GUI navigation/search refinements, smali code folding, and resource decoding work.
  • 2025: v1.5.2 release notes included Gradle export templates, APKM support, and initial DEX v41 support.
  • 2026: v1.5.4 release notes added CLI configuration load/save support.

Related projects

  • jadx sits near apktool, smali/baksmali, Android Studio, and other APK inspection tools, but its niche is Java-like source reconstruction plus a browsable GUI. Its plugin and library surfaces also make it adjacent to Java build tooling and custom Android analysis pipelines.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 1 runtime dependencies.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
jadxcliglobal executable
jadx-guicliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.5.5
manager updated
local dataok
upstreamcurrent
latest detectedv1.5.5

https://github.com/skylot/jadx

  • infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package keybrew:jadx
Version1.5.5
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/jadx
Homepagehttps://github.com/skylot/jadx
Repositoryhttps://github.com/skylot/jadx
Upstream docshttps://github.com/skylot/jadx
LicenseApache-2.0
Source archivehttps://github.com/skylot/jadx/archive/refs/tags/v1.5.5.tar.gz
Dependenciesopenjdk
Build dependenciesgradle
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namejadx
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

jadx

nix profile install nixpkgs#jadx
  • normalized package name match
  • Matched by: Jadx
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ja/jadx/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

jadx 1.5.5-r0

Tool for producing Java source code from Android Dex and Apk files

https://github.com/skylot/jadx

sudo apk add jadx
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: jadx
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Jadx
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: jadx from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

jadx-doc 1.5.5-r0

Tool for producing Java source code from Android Dex and Apk files (documentation)

https://github.com/skylot/jadx

sudo apk add jadx-doc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: jadx
  • normalized package name match
  • Matched by: Jadx
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: jadx-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
pacman95%

jadx 1.5.5-2

Command line and GUI tools to produce Java source code from Android Dex and APK files

https://github.com/skylot/jadx

sudo pacman -S jadx
  • License: Apache-2.0
  • Architecture: any
  • 2 dependencies
  • normalized package name match
  • Matched by: Jadx
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: jadx from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
Scoop95%

extras/jadx

scoop install extras/jadx
  • normalized package name match
  • Matched by: Jadx
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/jadx.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1
winget95%

Skylot.jadx

winget install --id Skylot.jadx -e
  • normalized package name match
  • Matched by: Jadx
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Skylot.jadx from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • openjdkRuntime dependency declared by Homebrew.
  • gradleBuild dependency declared by Homebrew.
  • apkleaksPopular package that depends on this formula.

Same workflow

  • ghidraShares av.db curated category or tags: cli, decompiler, reverse-engineering, security.
  • retdecShares av.db curated category or tags: cli, decompiler, reverse-engineering, security.
  • ipswShares av.db curated category or tags: cli, reverse-engineering, security.
  • radare2Shares av.db curated category or tags: cli, reverse-engineering, security.
  • redressShares av.db curated category or tags: cli, reverse-engineering, security.
  • rizinShares av.db curated category or tags: cli, reverse-engineering, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment