install

Additional install commands

macOS

Homebrewverified · 100%

brew install mask

local Homebrew formula metadata

MacPortsverified · 94%

sudo port install mask

MacPorts ports tree · sysutils/mask/Portfile · source: api.github.com

Linux

Nixverified · 92%

nix profile install nixpkgs#mask

nixpkgs package indexes · pkgs/by-name/ma/mask/package.nix · source: api.github.com

Windows

Scoopverified · 92%

scoop install main/mask

Scoop official bucket manifest trees · bucket/mask.json · source: api.github.com

overview

Package summary

CLI task runner defined by a simple markdown file

Project links

Commands and aliases

mask

history

Project history and usage

mask is a Rust CLI task runner whose commands are defined in a Markdown file. It treats `maskfile.md` as both human-readable project documentation and executable command metadata.

Project history

The mask repository was created in July 2019, and the earliest GitHub releases followed within the same month. Its initial release introduced the core Markdown-driven task-runner idea; later early releases added shell executors and adjusted argument syntax so required arguments would not conflict with Markdown rendering.

The README explains the author's motivation: mask grew from frustration with Makefile syntax, interest in `just`, and inspiration from `maid`, while choosing a single Rust binary instead of an npm package with many dependencies. That origin is central to its package identity: a lightweight executable with docs-as-commands semantics.

Adoption history

mask has modest but real adoption for a specialized developer tool, with GitHub showing around 1.6k stars and packaging in Homebrew, MacPorts, Nix, and Scoop according to the supplied package metadata.

Its adoption is concentrated among users who prefer checked-in project task files that read like documentation, especially where a `Makefile` or ad hoc scripts feel too terse for onboarding.

How it is used

A project defines headings, blockquotes, options, and code blocks in `maskfile.md`; running `mask build` or another subcommand executes the associated script. The README documents support for positional arguments, named flags, multiple runtimes, nested commands, and injected helper variables.

By default mask searches the current directory for `maskfile.md`, but `--maskfile <path_to_maskfile>` lets users run a project or global task file from another location.

Why package nerds care

mask is interesting to package users because it competes in the same ergonomic space as `make`, `just`, and npm scripts while using Markdown as the configuration language.

The single-binary Rust distribution model makes it easy to install through general package managers, which fits its pitch as a low-friction project automation tool.

Timeline

2019: GitHub repository created.
2019: v0.2.0 initial public release.
2019: v0.2.1 adds bash, zsh, and fish executors.
2026: GitHub lists mask v0.11.7 as the latest release in January 2026.

Related projects

mask is conceptually related to `make`, `just`, and `maid`.
Its parser is also exposed as the `mask-parser` crate, though the README says it is not yet documented or stable.

Sources

https://api.github.com/repos/jacobdeichert/mask
https://github.com/jacobdeichert/mask
https://github.com/jacobdeichert/mask/releases?page=3
source_facts.package-manager-url

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

narrow executable package without higher-risk signals

Signals

metadata:no-higher-risk-signals

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: maskfile.mdfile supplied with --maskfile

executables

Installed executables

Command	Kind	Exposure	Note
`mask`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version0.11.7

manager updated

local dataok

upstreamcurrent

latest detectedmask/0.11.7

https://github.com/jacobdeichert/mask

infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package key	brew:mask
Version	0.11.7
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/mask
Homepage	https://github.com/jacobdeichert/mask/
Repository	https://github.com/jacobdeichert/mask
Upstream docs	https://github.com/jacobdeichert/mask#readme
License	MIT
Source archive	https://github.com/jacobdeichert/mask/archive/refs/tags/mask/0.11.7.tar.gz
Build dependencies	rust
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	mask
Version Scheme	0
Revision	0
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

mask

nix profile install nixpkgs#mask

normalized package name match
Matched by: Mask

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ma/mask/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

MacPorts95%

mask

sudo port install mask

normalized package name match
Matched by: Mask

MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/mask/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Scoop95%

main/mask

scoop install main/mask

normalized package name match
Matched by: Mask

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/mask.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/mask.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install mask with Homebrew, MacPorts, Nix, scoop