conda-lock
Install command:
brew install conda-lockLightweight lockfile for conda environments
https://conda.github.io/conda-lock/
License: MIT
Development: Pull requests
Formula JSON API: /api/formula/conda-lock.json
Formula code: conda-lock.rb on GitHub
Bottle (binary package) installation support provided for:
| macOS on Apple Silicon |
tahoe | ✅ |
|---|---|---|
| sequoia | ✅ | |
| sonoma | ✅ | |
| macOS on Intel |
sonoma | ✅ |
| Linux | ARM64 | ✅ |
| x86_64 | ✅ | |
Current versions:
| stable | ✅ | 4.0.2 |
Revision: 5
Depends on:
| certifi | 2026.7.22 | Mozilla CA bundle for Python |
| libyaml | 0.2.5 | YAML Parser |
| pydantic | 2.13.4 | Data validation using Python type hints |
| python@3.14 | 3.14.7 | Interpreted, interactive, object-oriented programming language |
| zstd | 1.5.7 | Zstandard is a real-time compression algorithm |
Depends on when building from source:
| rust | 1.98.0 | Safe, concurrent, practical language |
Known vulnerabilities in the current version:
| GHSA-897w-fcg9-f6xj (high) | Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows |
| GHSA-9277-mp7x-85jf | Dulwich Vulnerable to Command Injection via Merge Driver Path |
| GHSA-555p-6grf-mh7f (low) | Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` |
| GHSA-xrvj-v92f-53gj (medium) | Dulwich has unbounded memory allocation in receive-pack from crafted thin packs |
| GHSA-gfhv-vqv2-4544 (high) | Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submod... |
Data from Homebrew/advisory-database. Run brew vulns conda-lock for a live check.
Analytics:
| 30 days | 90 days | 365 days | |
|---|---|---|---|
| Installs | 136 | 359 | 1,150 |
Installs (--HEAD) | 0 | 0 | 2 |
| Installs on Request | 136 | 359 | 1,150 |
Installs on Request (--HEAD) | 0 | 0 | 2 |
| Build Errors | 0 |