Scoop¶
- ID
scoop- Home page
- Version requirement
>= 0.2.4
- Platforms
🪟 Windows
- Operations
installed·outdated·search·install·upgrade·upgrade_all·remove·sync·cleanup·doctor- purl types
pkg:scoop- CLI name
scoop- Issues and PRs
- Source
Scoop is a user-level command-line installer for Windows.
Apps unpack under ~/scoop without elevation, so no operation is marked
sudo.
Documentation: ScoopInstaller/Scoop.
Note
The installed, outdated and search listings are column
tables introduced by a --- separator line: mpm drops everything up
to that separator, then splits each row positionally on whitespace.
Attention
scoop --version does not reliably print a clean version: it often
emits the raw git log line of the checkout instead. The probe
therefore carries fallbacks that recover the version from a
tag: vX.Y.Z ref or a Bump to version commit subject. See
Scoop’s own version-reporting issue.
Caution
remove uninstalls with --purge, so a package’s persisted data
directory is deleted with it rather than kept for a later reinstall.
What mpm adds to scoop¶
Through mpm, scoop gains --exact and --extended search, to narrow to exact names or match descriptions.
Bigger still, mpm reaches across every manager at once: mpm installed and mpm outdated cover scoop alongside every other manager you run in one table, mpm upgrade --all updates them together, and mpm sbom exports the whole machine as one bill of materials.
Every mpm command also gains --dry-run and --plan previews, cross-scheme version comparison and purl identifiers. See manager augmentations for how each one is built.
Your scoop commands, in mpm¶
You already know scoop: each operation maps one-to-one onto mpm, in an interface shared by every manager.
To… |
With |
With |
|---|---|---|
List what’s installed |
|
|
List outdated packages |
|
|
Search for a package |
|
|
Install a package |
|
|
Upgrade one package |
|
|
Upgrade everything |
|
|
Remove a package |
|
|
Clear caches |
|
|
Run health checks |
|
|
Prefix any command above with --dry-run to simulate the underlying manager calls without touching the system: the safe way to watch what mpm would do before trusting it.
Operations¶
Operation |
Supported |
Notes |
|---|---|---|
|
✓ |
|
|
✓ |
|
|
||
|
✓ |
exact and extended search backfilled by |
|
✓ |
|
|
✓ |
|
|
✓ |
|
|
✓ |
|
|
✓ |
|
|
✓ |
|
|
✓ |
Selecting and configuring scoop¶
Deselect scoop for a single run with --no-scoop, or persist the choice in your configuration:
[mpm]
scoop = false
Keep it enabled but tune how mpm drives it with a per-manager override:
[mpm.managers.scoop]
timeout = 900
mpm config-template scoop prints every overridable attribute as a ready-to-paste block.
Recipes¶
A few jobs you would otherwise script around scoop, one mpm command each:
Snapshot and clone a machine:
mpm --scoop dump scoop.toml, thenmpm restore scoop.tomlon the next one.Export a compliance SBOM:
mpm --scoop sbom(CycloneDX by default,--spdxfor SPDX).Gate CI on health:
mpm --scoop doctorrelays Scoop’s own diagnosis and exits non-zero on trouble.
Privilege escalation¶
mpm runs this manager as the current user and never prepends sudo by default. Flip the policy for its privileged operations with --sudo or the per-manager sudo override.
See privilege escalation for the full policy.
Cooldown¶
State of Scoop’s release-age gating, from the cooldown support table:
Status: 🚧 Proposed
Mechanism: open feature request
Reference: ScoopInstaller/Scoop#6513
A cooldown only pays off where a compromised release can be withdrawn while the clock runs, and can only be emulated where the registry dates its releases. From the retraction table:
Registry: Git-manifest indexes
Retraction: Index revert: reverting the manifest, Portfile or derivation commit withdraws the version
Publish date: ❌ only the commit date, which is client-set and trivially backdated
With --cooldown set, mpm skips this manager’s install and upgrade operations rather than run them unguarded (fail-closed); --allow-unsupported-managers opts back in.
Version probe¶
The version is probed by running:
$ scoop --version
Current Scoop version:
v0.2.4 - Released at 2022-08-08
'main' bucket:
5a5b13b6c (HEAD -> master, origin/HEAD) oh-my-posh: Update to version 11.1.1
and extracted with the first of these regular expressions to match:
r"^v(?P<version>\S+)\s.+"
r"^.+,\stag:\sv(?P<version>\S+),\s.+"
r"^.+\sBump\sto\sversion\s(?P<version>\S+)\s.+"
Reference traces¶
Raw native outputs captured in the manager source: the reference mpm’s parsers were written against. If you know Scoop well and a transcript below looks wrong, or a newer release changed its output format, report it.
> scoop list
Installed apps:
Name Version Source Updated Info
---- ------- ------ ------- ----
7zip 22.01 main 2022-09-27 08:03:30
dark 3.11.2 main 2022-09-27 08:04:26
git 2.37.3.windows.1 main 2022-09-27 08:03:58
python 3.10.7 main 2022-09-27 08:04:53
> scoop status
Name Installed Version Latest Version Missing Dependencies Info
---- ----------------- -------------- -------------------- ----
demulshooter 16.7.2 18.7.3
eduke32 20220611-10112 20220709-10115
Teracopy-np
yuzu-pineapple EA-2804 EA-2830
Feed any of these through mpm and the raw output becomes one uniform table, the same shape for every manager: filter it, project columns, or export it (mpm --scoop installed --output json, or csv, toml, yaml), each package carrying a purl and a version comparable across managers.