Automic VaultAutomic Vault

brew

Install wally with Homebrew, Nix, winget

Modern package manager for Roblox projects inspired by Cargo. Version 0.3.2 via Homebrew; verified 2026-06-22.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install wally

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#wally

nixpkgs package indexes · pkgs/by-name/wa/wally/package.nix · source: api.github.com

Windows

Windows Package Managerverified · 92%
winget install --id Ty&Neal.Wally -e

Windows Package Manager source index · Ty&Neal.Wally · source: cdn.winget.microsoft.com

overview

Package summary

Modern package manager for Roblox projects inspired by Cargo

Commands and aliases

  • wally

history

Project history and usage

Wally is the package manager for Roblox projects maintained by Uplift Games. It borrows its mental model from Cargo and npm: packages have manifests, dependency constraints, lockfiles, registries, and a command-line client, but the output is shaped for Roblox and Luau workflows.

Project history

Wally's first public GitHub release, v0.1.0, was published on August 3, 2021 and explicitly introduced it as a new package manager for Roblox in early alpha form. Later 2021 releases quickly added a public website, public authentication, development dependencies, and improvements to dependency resolution and package links.

The project is split between a `wally` command-line tool and registry services. The README describes the official registry as a Git repository containing the package index plus a registry API for downloading, searching, and publishing package contents, an architecture directly inspired by Cargo and crates.io.

By v0.3.2 in June 2023, the release notes called link generation and dev dependencies stable, reported much faster package downloads through parallelized installation, and improved lockfiles. The repository has not followed a rapid stable-release cadence since then, but the public index and package website continue to represent the production package ecosystem.

Adoption history

Wally's adoption is tied to the professionalization of Roblox development outside Roblox Studio. Rojo's documentation lists Wally alongside tools such as Selene, StyLua, and Moonwave as part of the file-based Roblox workflow, and Uplift Games presents Wally with Rojo as part of its open source tooling for scalable, collaborative Roblox projects.

The registry includes widely used Roblox packages such as Cmdr, Roact, Promise, TestEZ, Knit, Janitor, and RbxUtil-family packages. Third-party library documentation commonly instructs developers to add dependencies to `wally.toml`, run `wally install`, and sync the generated Packages folder through Rojo.

How it is used

A typical project runs `wally init`, edits `wally.toml` to declare package metadata and dependencies, runs `wally install`, and commits the resulting lockfile so the team resolves the same package versions. The generated Packages folder is then mapped into Roblox services such as ReplicatedStorage through Rojo.

Package authors use Wally to publish reusable Luau modules to a scoped registry, while teams use it to avoid manually vendoring and updating common libraries. Its package-nerd role is to bring standard package-manager discipline to an ecosystem that historically relied on model files, copied modules, and ad hoc GitHub downloads.

Timeline

  • 2021-08-03: v0.1.0 launched as the first public Wally release.
  • 2021-10-01: v0.2.1 announced the public wally.run website.
  • 2021-11-11 and 2021-11-12: v0.3.0 and v0.3.1 added and iterated on dev-dependency support.
  • 2023-06-05: v0.3.2 stabilized link generation and dev dependencies and improved install performance.

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • infrastructure mutation or orchestration signal

Signals

  • text:package manager

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 1 runtime dependencies.
  • Build metadata lists 2 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
wally.toml

executables

Installed executables

CommandKindExposureNote
wallycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.3.2
manager updated2026-06-22
local dataok
upstreamcurrent
latest detectedv0.3.2

https://github.com/UpliftGames/wally

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:wally
Version0.3.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/wally
Homepagehttps://wally.run
Repositoryhttps://github.com/UpliftGames/wally
Upstream docshttps://github.com/UpliftGames/wally#readme
LicenseMPL-2.0
Source archivehttps://github.com/UpliftGames/wally/archive/refs/tags/v0.3.2.tar.gz
Last updated2026-06-22T14:06:38-07:00
Pulseupdated
Dependenciesopenssl@3
Build dependenciespkgconf, rust
Uses from macOSbzip2
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namewally
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

wally

nix profile install nixpkgs#wally
  • normalized package name match
  • Matched by: Wally
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/wa/wally/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
winget95%

Ty&Neal.Wally

winget install --id Ty&Neal.Wally -e
  • normalized package name match
  • Matched by: Wally
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Ty&Neal.Wally from https://cdn.winget.microsoft.com/cache/source.msix
winget95%

UpliftGames.wally

winget install --id UpliftGames.wally -e
  • normalized package name match
  • Matched by: Wally
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: UpliftGames.wally from https://cdn.winget.microsoft.com/cache/source.msix

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment