Homebrew Formulae: conda-lock

conda-lock

Install command:

brew install conda-lock

Lightweight lockfile for conda environments

License: MIT

Formula code: conda-lock.rb on GitHub

Bottle (binary package) installation support provided for:

Current versions:

stable

✅

4.0.3

Revision: 1

Depends on:

certifi	2026.10.19	Mozilla CA bundle for Python
libyaml	0.2.5	YAML Parser
pydantic	2.14.1	Data validation using Python type hints
python@3.15	3.15.0	Interpreted, interactive, object-oriented programming language
zstd	1.5.7	Zstandard is a real-time compression algorithm

Depends on when building from source:

1.99.1

Safe, concurrent, practical language

Binaries: conda-lock

Known vulnerabilities in the current version:

GHSA-p58f-9548-mpm2 (high)	virtualenv bash and fish activation scripts execute commands embedded in paths
GHSA-94p9-xgh2-xp45	virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
GHSA-9h9j-4vrj-gf7g	virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing conf...
GHSA-897w-fcg9-f6xj (high)	Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows
GHSA-9277-mp7x-85jf	Dulwich Vulnerable to Command Injection via Merge Driver Path
GHSA-555p-6grf-mh7f (low)	Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`
GHSA-xrvj-v92f-53gj (medium)	Dulwich has unbounded memory allocation in receive-pack from crafted thin packs
GHSA-gfhv-vqv2-4544 (high)	Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submod...
GHSA-35mr-4567-66vg (medium)	Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution
GHSA-5fqc-mrg8-w798 (high)	Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persist...
GHSA-8w8g-wq8h-fq33 (high)	Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protect...
GHSA-cm62-gvxx-vmxx (high)	Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate di...

Data from Homebrew/advisory-database. Run brew vulns conda-lock for a live check.

Analytics: