Automic VaultAutomic Vault

brew

Install jaq with Homebrew, apk, MacPorts, Nix, pacman, scoop, zypper

JQ clone focussed on correctness, speed, and simplicity. Version 3.1.0 via Homebrew; verified 2026-06-11.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install jaq

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install jaq

MacPorts ports tree · textproc/jaq/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add jaq

Alpine Linux edge package indexes · jaq · source: dl-cdn.alpinelinux.org

Nixverified · 92%
nix profile install nixpkgs#jaq

nixpkgs package indexes · pkgs/by-name/ja/jaq/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S jaq

Arch Linux sync databases · jaq · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install jaq

openSUSE Tumbleweed package metadata · jaq · source: download.opensuse.org

Windows

Scoopverified · 92%
scoop install main/jaq

Scoop official bucket manifest trees · bucket/jaq.json · source: api.github.com

overview

Package summary

JQ clone focussed on correctness, speed, and simplicity

Commands and aliases

  • jaq

history

Project history and usage

jaq is a Rust implementation of the jq language and command-line JSON processing workflow, focused on correctness, speed, and simplicity. It is both a `jaq` executable for shell pipelines and a Rust library, `jaq-core`, for embedding jq-like filters in applications.

Project history

The GitHub repository was created in December 2020. The README says jaq was originally motivated by the startup time of jq 1.6 and later kept its focus on correctness, performance, and a small implementation that is easier to audit and contribute to.

The project expanded beyond JSON-only jq compatibility. The README and manual document YAML, CBOR, TOML, XML, CSV, TSV, byte strings, non-string object keys, in-place replacement, and explicit documentation of divergences from jq. Release notes for the 3.0 line describe multi-format support as a major shift, effectively making jaq a structured-data transformation tool rather than only a jq clone.

Adoption history

jaq spread through Rust and package-manager channels: the README links crates.io/docs.rs badges for `jaq-core`, binary releases for Linux, macOS, and Windows, Homebrew install commands, and a Repology packaging badge. Homebrew API data available during this enrichment recorded 2,232 installs over 365 days.

The project also gained formal support and review. The README credits NLnet and NGI0 funding, and its security section records Radically Open Security audits tied to NLnet grants, with audit findings addressed and fuzzing targets added.

How it is used

Users can treat `jaq` as a drop-in `jq` replacement for many filters, use it to transform JSON and other structured formats, or embed `jaq-core` in Rust programs. The manual covers the CLI, jq core language, standard library, advanced features, supported formats, examples, and documented compatibility differences.

Why package nerds care

jaq matters to package nerds because it is a modern reimplementation of a beloved Unix data-filter language with a Rust library boundary, strong benchmarking culture, audit notes, and multi-format ambitions. It is the kind of package users install when they care about jq semantics, startup cost, embedding, and structured-data plumbing.

Timeline

  • 2020: GitHub repository created for the Rust jq clone.
  • 2024: v2.0.1 release notes focused on command-line flag behavior such as `--null-input`, `--slurpfile`, and `--from-file`.
  • 2025: v2.2.0 release notes recorded path-related language work and noted that jaq-core had been audited by Radically Open Security.
  • 2025: v3.0.0-alpha release notes introduced a new manual and support for YAML, CBOR, TOML, and XML under NLnet-backed work.
  • 2026: v3.0.0 release notes described multi-format support for YAML, CBOR, TOML, XML, CSV, TSV, and JSON.
  • 2026: v3.1.0 release notes added jq's `input_filename` filter and compatibility fixes.

Related projects

  • jaq is directly related to jq, gojq, the jq language specification work linked from its manual, and Rust crates such as `jaq-core`, `jaq-json`, `jaq-all`, and `jaq-fmts`. The README also mentions hifijson as a related parser project with fuzzing history.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
jaqcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version3.1.0
manager updated2026-06-11
local dataok
upstreamcurrent
latest detectedv3.1.0

https://github.com/01mf02/jaq

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:jaq
Version3.1.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/jaq
Homepagehttps://github.com/01mf02/jaq
Repositoryhttps://github.com/01mf02/jaq
Upstream docshttps://gedenkt.at/jaq/manual
LicenseMIT
Source archivehttps://github.com/01mf02/jaq/archive/refs/tags/v3.1.0.tar.gz
Last updated2026-06-11T19:54:56Z
Pulseupdated
Build dependenciesrust
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namejaq
Version Scheme0
Revision0
Head VersionHEAD
Conflicts With
  • json2tsv
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

jaq

nix profile install nixpkgs#jaq
  • normalized package name match
  • Matched by: Jaq
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ja/jaq/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

jaq 2.3.0-r0

jq clone focused on correctness, speed and simplicity

https://github.com/01mf02/jaq

sudo apk add jaq
  • License: MIT
  • Architecture: x86_64
  • Source Package: jaq
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Jaq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: jaq from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

jaq-doc 2.3.0-r0

jq clone focused on correctness, speed and simplicity (documentation)

https://github.com/01mf02/jaq

sudo apk add jaq-doc
  • License: MIT
  • Architecture: x86_64
  • Source Package: jaq
  • normalized package name match
  • Matched by: Jaq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: jaq-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
pacman95%

jaq 3.0.0-1

A jq clone focussed on correctness, speed, and simplicity

https://github.com/01mf02/jaq

sudo pacman -S jaq
  • License: MIT
  • Architecture: x86_64
  • 2 dependencies
  • normalized package name match
  • Matched by: Jaq
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: jaq from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

jaq 2.3.0-1.3

jq clone in Rust

https://github.com/01mf02/jaq

sudo zypper install jaq
  • License: MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: jaq
  • 3 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Jaq
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: jaq from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

jaq

sudo port install jaq
  • normalized package name match
  • Matched by: Jaq
MacPorts ports tree · api.github.com · MacPorts ports tree: textproc/jaq/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/jaq

scoop install main/jaq
  • normalized package name match
  • Matched by: Jaq
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/jaq.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • rustBuild dependency declared by Homebrew.

Same workflow

  • gronShares av.db curated category or tags: cli, data-processing, developer-tools, json.
  • gojqShares av.db curated category or tags: cli, developer-tools, jq, json, query-language.
  • jnvShares av.db curated category or tags: cli, developer-tools, jq, json, rust.
  • oqShares av.db curated category or tags: cli, data-processing, developer-tools, jq, json.
  • python-yqShares av.db curated category or tags: cli, data-processing, developer-tools, jq, json.
  • yqShares av.db curated category or tags: cli, data-processing, developer-tools, json.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment