# pote/gpm

Barebones dependency manager for Go.

Repository: https://github.com/pote/gpm
Canonical: https://ross.abutalabs.com/products/gpm
Language: Shell
License: MIT
License Family: permissive
Last push: 2017-09-28T11:40:26+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 4746, "days_push": 3261, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1174, forks 51 (observed 2026-08-28T04:03:52.015464+00:00)

## What it is
gpm is a barebones, shell-based dependency manager for Go that pins external package dependencies to specific revisions via a Godeps manifest file. It achieves reproducible builds by fetching dependencies with go get and checking out the exact versions specified.

## Use cases
- pin go dependencies to exact revisions
- achieve reproducible builds for go applications
- manage go dependencies with a simple Godeps file
- install go dependencies on CI servers
- isolate go project dependencies in workspaces

## When to choose
- you maintain a legacy Go project predating Go modules
- you want a minimal, dependency-free bash tool for pinning Go package revisions
- you need a lightweight dependency fetcher for CI environments

## When to avoid
- you are starting a new Go project - use Go modules instead
- you need active maintenance or modern Go tooling support
- you need dependency resolution, semantic versioning, or module proxies

## Facets
- artifact type: cli-tool
- maturity: abandoned
- function: package-manager, build-tool, developer-tools
- domain: developer-tools, version-control
- platform: cli, go
- tags: go-dependency-manager, reproducible-builds, godeps, shell-script, vendoring, command-line, linux, macos

## Member repositories
- pote/gpm (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:52.015464+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:28:19.044177+00:00, confidence not recorded.
  - readme: https://github.com/pote/gpm (fetched 2026-08-28T04:03:52.015464+00:00, sha 8fbc76ac6441)
- Data as of 2026-08-30T08:39:29.467469+00:00.