Automic VaultAutomic Vault

brew

Install jose with Homebrew, apk, apt, dnf, Nix, pacman, zypper

C-language implementation of Javascript Object Signing and Encryption. Version 15 via Homebrew; verified 2026-06-08.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install jose

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add jose

Alpine Linux edge package indexes · jose · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install jose

Debian stable package indexes · jose · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install jose

Fedora Rawhide package metadata · jose · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#jose

nixpkgs package indexes · pkgs/by-name/jo/jose/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S jose

Arch Linux sync databases · jose · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install jose

openSUSE Tumbleweed package metadata · jose · source: download.opensuse.org

overview

Package summary

C-language implementation of Javascript Object Signing and Encryption

Commands and aliases

  • jose

history

Project history and usage

José is a C implementation and command-line utility for the IETF JSON Object Signing and Encryption family of standards, including JWS, JWE, JWK, JWA, JWT, JOSE examples, and JWK thumbprints. It gives systems programmers and shell users a native CLI for operations that are more often hidden inside web-framework libraries.

Project history

The JOSE RFC set was published as proposed standards in May 2015. The latchset/jose repository followed in 2016, after the standards had stabilized, with a README positioning the project as a C-language implementation tested against RFC test vectors.

Early GitHub releases appeared in August 2016. Subsequent releases kept the project useful as a small, packaging-friendly crypto utility rather than a large application framework.

Adoption history

The input package metadata records Jose across several Unix package families, including Homebrew, Debian, Fedora/DNF, Alpine, Arch, Nix, Ubuntu, and openSUSE. That breadth reflects a common packaging role: a compact CLI and C library for JWT, JWK, signing, encryption, and thumbprint tasks in scripts and system components.

How it is used

The README documents key generation, extracting public JWKs, computing thumbprints, signing and verifying JWS payloads, and encrypting and decrypting JWE payloads from the shell. That makes Jose useful for testing identity-provider flows, debugging token material, and automating JOSE operations without writing an application.

Why package nerds care

For package maintainers, Jose is interesting because it maps web-token standards into a traditional Unix tool shape: a C codebase, Meson build, OpenSSL/Jansson dependencies, manpage-style CLI behavior, and distro packages. It is the kind of small utility that becomes valuable glue in security packaging even when end users mostly know higher-level JWT libraries.

Timeline

  • 2015-05: RFC 7515 through RFC 7519 standardized the core JOSE/JWT documents.
  • 2016-06: The latchset/jose repository was created on GitHub.
  • 2016-08: v1 was published as an early GitHub release.
  • 2021-05: v11 was published after Jose had already reached multiple distro package sets.
  • 2026-06: v15 was published on GitHub.

Related projects

  • Jose belongs to the wider JOSE ecosystem alongside language-specific libraries such as go-jose, node-jose, and Python JOSE bindings. It is also tied directly to IETF standards work around JWS, JWE, JWK, JWA, JWT, and related examples and thumbprint specifications.

security posture

Risk level: blue

broad file, network, media, or database tool signal.

Risk classifier

blue risk · medium confidence · tool

Why

  • broad file, network, media, or database tool signal

Signals

  • text:encrypt

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 2 runtime dependencies.
  • Build metadata lists 3 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
josecliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version15
manager updated2026-06-08
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/latchset/jose

install metadata

Package metadata

Package keybrew:jose
Version15
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/jose
Homepagehttps://github.com/latchset/jose
Repositoryhttps://github.com/latchset/jose
Upstream docshttps://github.com/latchset/jose#readme
LicenseApache-2.0
Source archivehttps://github.com/latchset/jose/releases/download/v15/jose-15.tar.xz
Last updated2026-06-08T14:32:19Z
Pulseupdated
Dependenciesjansson, openssl@4
Build dependenciesmeson, ninja, pkgconf
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namejose
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

jose 14-2

C implementation of Javascript Object Signing and Encryption standards

https://github.com/latchset/jose

sudo apt install jose
  • Section: net
  • Architecture: amd64
  • 3 dependencies
  • normalized package name match
  • Matched by: Jose
Debian stable package indexes · deb.debian.org · Debian stable package indexes: jose from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libjose-dev 14-2

Javascript Object Signing and Encryption (José) - development files

https://github.com/latchset/jose

sudo apt install libjose-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: jose
  • 4 dependencies
  • normalized package name match
  • Matched by: Jose
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libjose-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libjose0 14-2

Javascript Object Signing and Encryption (José) - library

https://github.com/latchset/jose

sudo apt install libjose0
  • Section: libs
  • Architecture: amd64
  • Source Package: jose
  • 4 dependencies
  • normalized package name match
  • Matched by: Jose
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libjose0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

jose

nix profile install nixpkgs#jose
  • normalized package name match
  • Matched by: Jose
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/jo/jose/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

jose 13-1

C implementation of Javascript Object Signing and Encryption standards

https://github.com/latchset/jose

sudo apt install jose
  • Section: universe/net
  • Architecture: amd64
  • 3 dependencies
  • normalized package name match
  • Matched by: Jose
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: jose from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libjose-dev 13-1

Javascript Object Signing and Encryption (José) - development files

https://github.com/latchset/jose

sudo apt install libjose-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: jose
  • 4 dependencies
  • normalized package name match
  • Matched by: Jose
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libjose-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libjose0 13-1

Javascript Object Signing and Encryption (José) - library

https://github.com/latchset/jose

sudo apt install libjose0
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: jose
  • 4 dependencies
  • normalized package name match
  • Matched by: Jose
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libjose0 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

jose 14-r0

C-language implementation of Javascript Object Signing and Encryption

https://github.com/latchset/jose

sudo apk add jose
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: jose
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Jose
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: jose from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

jose-dev 14-r0

C-language implementation of Javascript Object Signing and Encryption (development files)

https://github.com/latchset/jose

sudo apk add jose-dev
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: jose
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Jose
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: jose-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

jose-doc 14-r0

C-language implementation of Javascript Object Signing and Encryption (documentation)

https://github.com/latchset/jose

sudo apk add jose-doc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: jose
  • normalized package name match
  • Matched by: Jose
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: jose-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libjose 14-r0

C-language implementation of Javascript Object Signing and Encryption (libraries)

https://github.com/latchset/jose

sudo apk add libjose
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: jose
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Jose
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libjose from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

jose 14-6.fc44

Tools for JSON Object Signing and Encryption (JOSE)

https://github.com/latchset/jose

sudo dnf install jose
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: jose
  • 6 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Jose
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: jose from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

libjose 14-6.fc44

Library implementing JSON Object Signing and Encryption

https://github.com/latchset/jose

sudo dnf install libjose
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: i686
  • Source Package: jose
  • 6 dependencies
  • 4 provides
  • normalized package name match
  • Matched by: Jose
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: libjose from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

libjose-devel 14-6.fc44

Development files for libjose

https://github.com/latchset/jose

sudo dnf install libjose-devel
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: i686
  • Source Package: jose
  • 5 dependencies
  • 4 provides
  • normalized package name match
  • Matched by: Jose
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: libjose-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

jose 15-2

C-language implementation of Javascript Object Signing and Encryption

https://github.com/latchset/jose

sudo pacman -S jose
  • License: Apache-2.0
  • Architecture: x86_64
  • 5 dependencies
  • normalized package name match
  • Matched by: Jose
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: jose from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

jose 14-1.2

C-language implementation of Javascript Object Signing and Encryption

https://github.com/latchset/jose

sudo zypper install jose
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: jose
  • 3 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Jose
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: jose from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • openssl@4Runtime dependency declared by Homebrew.
  • mesonBuild dependency declared by Homebrew.
  • ninjaBuild dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.

Same workflow

  • libjwtShares av.db curated category or tags: cli, cryptography, jwe, jws, jwt.
  • botanShares av.db curated category or tags: cli, cryptography, security.
  • ccryptShares av.db curated category or tags: cli, cryptography, security.
  • cfsslShares av.db curated category or tags: cli, cryptography, security.
  • gmsslShares av.db curated category or tags: cli, cryptography, security.
  • gnupg-pkcs11-scdShares av.db curated category or tags: cli, cryptography, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment