Rusk
Rusk: An open-source CLI for dependency resolution, verification, auditing, and publishing. Ranked #17 of 19 in JavaScript Package Managers by our editors (6.0/10); pricing: Free plan; best for security-conscious npm and Python projects.
At a glance
- Editor score6.0 / 10
- PricingFree plan
- Best forSecurity-conscious npm and Python projects
- Free planYes
- Paid fromFree
- Facts checked20 Sep 2026
Where it wins
- Verifies SHA-256 digests, npm signatures, and PyPI provenance
- Generates lockfiles and uses content-addressed package caching
- Provides sandboxed scripts, audits, and CI-friendly JSON output
Where it doesn't
- Command-line interface may not suit teams seeking graphical workflows
- No AI-assisted features are included
- Its language focus is limited to JavaScript, TypeScript, and Python
Our verdict on Rusk
Rusk is an open-source command-line package manager for JavaScript, TypeScript, and Python projects. It resolves dependencies, generates lockfiles with package digests, installs packages into project environments, and supports package publishing. Its security-oriented feature set makes it a strong fit for teams that want dependency workflows to include verification, auditing, and trust-policy evaluation rather than resolution alone. Rusk runs on Linux, macOS, and Windows through a Rust-based CLI, with binaries and source-build instructions available for those platforms.
Security and supply-chain controls are the clearest reason to consider Rusk. It verifies SHA-256 artifact digests, checks npm signatures and PyPI provenance, and evaluates trust policies during security auditing. Packages are stored in a content-addressed cache, while build scripts run in a sandboxed environment. These capabilities give projects several layers for checking package integrity and controlling installation behavior. Structured JSON output and CI exit codes also make the tool suitable for automated pipelines that need machine-readable results and clear failure signaling.
Migration and workflow coverage strengthen its fit for existing npm-based projects. Rusk can migrate lockfiles from npm, Yarn, and pnpm, supports both npm and PyPI workflows, and includes package publishing alongside installation and dependency resolution. The trade-off is a focused command-line experience: teams looking for a graphical package-management interface or AI-assisted functionality should look elsewhere. Rusk is best suited to security-conscious JavaScript, TypeScript, and Python teams that value open-source tooling, reproducible lockfiles, verification, and CI integration.
Your product? Our editors can test Rusk in depth and publish a review, labelled as paid · from $149/mo →
Rusk pricing
Rusk fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Workspace support | Not verified |
| Lockfile support | Yes |
| Peer dependency handling | Not verified |
| Package publishing | Yes |
| Offline package cache | Yes |
| Global installation | Not verified |
| Deployment | Self-hosted |
| Platforms | Windows, macOS, Linux |
| Support | Docs |
| Built for | Solo, Small business (editorial estimate) |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 20 Sep 2026 |
Alternatives to Rusk
- npmA broad JavaScript package workflow with public access free and private packages paid.9.4
- pnpmA free, open-source choice for monorepos, reproducible installs, and efficient storage.9.2
- YarnA flexible, free package manager for projects from single apps to monorepos.9.0
Used Rusk? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Rusk for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Rusk is listed in our JavaScript Package Managers directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/rusk/"><img src="https://www.itechguides.com/best/badge/rusk.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update