pkgx is a standalone CLI package runner (~4 MiB) that can run any open-source tool without modifying the host system. It resolves dependencies, downloads pre-built tarballs from a distribution server (dist.pkgx.dev), installs them to ~/.pkgx, and injects the correct environment (PATH, MANPATH, PKG_CONFIG_PATH, etc.) before executing the requested command. The codebase is a Rust workspace split into a CLI crate (crates/cli) handling argument parsing, querying, and execution, and a library crate (crates/lib) providing core logic: local cellar management, pantry YAML parsing with platform-aware deserialization, SQLite-backed pantry indexing, async installation with atomic extraction and file locking, dependency graph hydration with support for multi-version projects (e.g., OpenSSL 1.1 vs 3), and environment variable construction (including moustache template expansion for runtime env vars). The architecture is monolithic but well-modularized, with clear separation of concerns. It demonstrates high craftsmanship in areas like cross-platform environment handling, progress visualization, and robust concurrent installation. The repository is actively maintained with comprehensive CI/CD pipelines, tests, and code quality checks.
envio is a Rust CLI tool for managing environment variables in encrypted profiles. It creates, edits, imports, exports, and deletes profiles stored as `.envio` files in a project's `.envio/profiles` directory. The profiles can be plaintext or encrypted using passphrase (Argon2id + XChaCha20Poly1305), symmetric key (base64-encoded 32-byte key + XChaCha20Poly1305), or GPG (delegates to the system `gpg` CLI). The tool integrates with the OS keyring to store encryption keys and provides both a command-line interface and a TUI (beta) built with ratatui. The architecture cleanly separates library code (profile, cipher, env map) from binary code (CLI, TUI, prompts). The library is reusable for other Rust projects needing profile-based encrypted env management, though cipher types are somewhat coupled to the crate's error types. The encryption implementations demonstrate solid security practices (Argon2id password hashing, XChaCha20Poly1305 AEAD with streaming). The CI/CD pipeline builds for multiple platforms and generates shell completions and man pages at compile time. The project lacks unit tests in the visible source tree, which is a notable gap.