0.1.0	Mar 7, 2026

MIT license

45KB
1K SLoC

hermit

A package manager management tool that unifies package management across multiple package managers.

Multi-package manager support: Works with bun, npm, pnpm, deno, cargo, pip, uv, brew, gem, and go
Lockfile support: Generates hermit.lock to ensure reproducible installations
Version verification: Check that installed packages match expected versions
Easy package management: Add, remove, and sync packages with simple commands

cargo install hermit-rs

Or build from source:

git clone https://github.com/tropicaloss/hermit-rs.git
cd hermit-rs
cargo build --release

Configuration

Create a .hermit file in your project root:

manager = "npm"

[packages]
react = "18.3.0"
lodash = "4.17.21"

Install all packages defined in .hermit:

hermit sync

With verbose output:

hermit sync -v

Add a new package to .hermit:

hermit add <package> <version>

Example:

hermit add react 18.3.0

Remove a package from .hermit:

hermit remove <package>

Example:

hermit remove lodash

Regenerate hermit.lock without installing packages:

hermit lock

Check that installed packages match the lockfile:

hermit check

Remove all hermit-managed installations:

hermit clean

Configuration file defining the package manager and packages:

manager = "npm"

[packages]
package1 = "1.0.0"
package2 = "2.0.0"

Auto-generated lockfile that tracks installed package versions and their sources:

[packages.package1]
version = "1.0.0"
resolved = "https://registry.npmjs.org/package1/-/package1-1.0.0.tgz"
hash = "sha512-..."

When using manager = "cargo", hermit reads dependencies directly from your Cargo.toml and uses cargo fetch to download them:

manager = "cargo"

No [packages] section is needed - hermit will automatically sync all dependencies from Cargo.toml.

cargo build

cargo test

RUST_LOG=debug cargo run -- sync

MIT

~9–24MB
~340K SLoC