Automic VaultAutomic Vault

brew

Install yamlfmt with Homebrew, apk, Nix, pacman, scoop

Extensible command-line tool to format YAML files. Version 0.21.0 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install yamlfmt

local Homebrew formula metadata

Windows

Scoopverified · 92%
scoop install main/yamlfmt

Scoop official bucket manifest trees · bucket/yamlfmt.json · source: api.github.com

overview

Package summary

Extensible command-line tool to format YAML files

Commands and aliases

  • yamlfmt

history

Project history and usage

Google yamlfmt is a Go command-line formatter and library for YAML files. Its goals are explicit: be easy to distribute as a single binary, be extensible with custom formatters, and be usable as a library foundation for teams that need a customized YAML formatter.

Project history

The repository was created on 2022-08-10. The README describes the project as an extensible formatter rather than only a fixed style tool: users can run the `yamlfmt` command, install it as a pre-commit hook, use a container image, or build on the library APIs.

The project grew around formatter backends and configuration. The default `basic` formatter serializes YAML through a fork of gopkg.in/yaml.v3, while the `kyaml` formatter targets Kubernetes YAML style. The docs also record caveats around YAML directives, anchors, aliases, line breaks, and line-length behavior, showing the practical complexity behind YAML formatting.

Adoption history

yamlfmt has a broad package-manager footprint in the supplied data, including Homebrew, Nix, apk, pacman, and Scoop. Its README also presents Go installation, release binaries, pre-commit integration, and a container image, which fits modern developer-tool adoption through local hooks and CI checks.

The repository lives under the Google organization but the README states that it is not officially supported by Google and is maintained primarily by an individual maintainer in spare time. That makes it an interesting case where a high-visibility org namespace helped adoption of a still-community-paced developer tool.

How it is used

Basic usage is `yamlfmt x.yaml y.yaml ...` or `yamlfmt .`, where directories are searched recursively for `.yaml` and `.yml` files. The `-dstar` mode enables doublestar glob matching, and `-lint` supports CI workflows that check formatting without rewriting files.

Configuration is discovered from a `-conf` flag, the working directory, ancestor directories, or a system config directory. Supported config filenames include `.yamlfmt`, `yamlfmt.yml`, `yamlfmt.yaml`, `.yamlfmt.yaml`, and `.yamlfmt.yml`.

Why package nerds care

yamlfmt is package-nerd significant because it packages the messy YAML-formatting problem as a distributable Go binary with docs for hooks, containers, global config, and release artifact verification.

It also represents the split in YAML tooling between generic style normalization and domain-specific formats such as Kubernetes KYAML, a distinction that matters to maintainers choosing formatter defaults for large repositories.

Timeline

  • 2022-08-10: GitHub repository created.
  • 2020s: Project goals documented around single-binary distribution, custom formatter extension, and library use.
  • 2020s: Configuration discovery documented across local project files, ancestor search, and platform config directories.
  • 2020s: README documented pre-commit, container, and CI usage patterns.

Related projects

  • Related projects and technologies include gopkg.in/yaml.v3, Kubernetes KYAML, pre-commit, bmatcuk/doublestar, cosign, and container-based CI runners.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
.yamlfmtyamlfmt.ymlyamlfmt.yaml.yamlfmt.yaml.yamlfmt.yml$XDG_CONFIG_HOME/yamlfmt/.yamlfmt~/.config/yamlfmt/.yamlfmt
Windows
%LOCALAPPDATA%\yamlfmt\.yamlfmt

executables

Installed executables

CommandKindExposureNote
yamlfmtcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.21.0
manager updated
local dataok
upstreamcurrent
latest detectedv0.21.0

https://github.com/google/yamlfmt

  • infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package keybrew:yamlfmt
Version0.21.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/yamlfmt
Homepagehttps://github.com/google/yamlfmt
Repositoryhttps://github.com/google/yamlfmt
Upstream docshttps://github.com/google/yamlfmt#readme
LicenseApache-2.0
Source archivehttps://github.com/google/yamlfmt/archive/refs/tags/v0.21.0.tar.gz
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameyamlfmt
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

yamlfmt

nix profile install nixpkgs#yamlfmt
  • normalized package name match
  • Matched by: Yamlfmt
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ya/yamlfmt/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

yamlfmt 0.21.0-r5

An extensible command line tool or library to format yaml files

https://github.com/google/yamlfmt

sudo apk add yamlfmt
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: yamlfmt
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Yamlfmt
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: yamlfmt from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

yamlfmt-doc 0.21.0-r5

An extensible command line tool or library to format yaml files (documentation)

https://github.com/google/yamlfmt

sudo apk add yamlfmt-doc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: yamlfmt
  • normalized package name match
  • Matched by: Yamlfmt
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: yamlfmt-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman95%

yamlfmt 0.21.0-1

An extensible command line tool or library to format yaml files.

https://github.com/google/yamlfmt

sudo pacman -S yamlfmt
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Yamlfmt
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: yamlfmt from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
Scoop95%

main/yamlfmt

scoop install main/yamlfmt
  • normalized package name match
  • Matched by: Yamlfmt
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/yamlfmt.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • goBuild dependency declared by Homebrew.

Same workflow

  • gofumptShares av.db curated category or tags: cli, developer-tools, formatter, go.
  • goimportsShares av.db curated category or tags: cli, developer-tools, formatter, go.
  • yamlfixShares av.db curated category or tags: cli, developer-tools, formatter, yaml.
  • jsonfmtShares av.db curated category or tags: cli, developer-tools, formatter.
  • jsonppShares av.db curated category or tags: cli, developer-tools, formatter.
  • odinfmtShares av.db curated category or tags: cli, developer-tools, formatter.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment