Scoop

ID

scoop

Links

Home page · Documentation · Repository · Wikipedia

Upstream stars

⭐ 24,703

Last commit

2025-08-12

Version requirement

>= 0.6

Platforms

🪟 Windows

Operations

installed · outdated · search · install · upgrade · upgrade_all · remove · sync · cleanup · doctor

purl types

pkg:scoop/

CLI name

scoop

Issues and PRs

📦 manager: scoop-based

Source

scoop.py

Scoop is a user-level command-line installer for Windows.

Apps unpack under ~/scoop without elevation, so no operation is marked sudo. Escalating would be fatal: the installer refuses to run as an administrator at all, answering Running the installer as administrator is disabled by default and aborting.

What mpm adds to scoop

Through mpm, scoop gains --exact and --extended search, to narrow to exact names or match descriptions.

Bigger still, mpm reaches across every manager at once: mpm installed and mpm outdated cover scoop alongside every other manager you run in one table, mpm upgrade --all updates them together, and mpm sbom exports the whole machine as one bill of materials.

Every mpm command also gains --dry-run and --plan previews, cross-scheme version comparison and purl identifiers. See manager augmentations for how each one is built.

Your scoop commands, in mpm

You already know scoop: each operation maps one-to-one onto mpm, in an interface shared by every manager.

To…

With scoop

With mpm

List what’s installed

scoop list

mpm --scoop installed

List outdated packages

scoop status

mpm --scoop outdated

Search for a package

scoop search zip

mpm --scoop search zip

Install a package

scoop install 7zip

mpm install pkg:scoop/7zip

Upgrade one package

scoop update 7zip

mpm --scoop upgrade 7zip

Upgrade everything

scoop update --all

mpm --scoop upgrade --all

Remove a package

scoop uninstall 7zip --purge

mpm remove pkg:scoop/7zip

Clear caches

scoop cleanup --all --cache

mpm --scoop cleanup --cache

Run health checks

scoop checkup

mpm --scoop doctor

Prefix any command above with --dry-run to simulate the underlying manager calls without touching the system: the safe way to watch what mpm would do before trusting it.

Operations

Operation

Supported

Notes

installed

✅

outdated

✅

orphans

search

✅

Exact and extended search backfilled by mpm.

install

✅

A version installs the manifest that shipped it, which pins the package: outdated and upgrade then skip it.

upgrade

✅

upgrade_all

✅

remove

✅

The remove command uninstalls with --purge, so a package’s persisted data directory is deleted rather than kept for a later reinstall.

sync

✅

cleanup

✅

doctor

✅

Configuration

  • Ignore scoop on the mpm CLI by passing the --no-scoop option.

  • Ignore it for every run in your configuration:

    [mpm]
    scoop = false
    
  • Raise the timeout of all scoop calls:

    [mpm.overrides.scoop]
    timeout = 900
    
  • Run mpm config-template scoop to print all overridable settings for your configuration file:

    [mpm.overrides.scoop]
    cli_names = [
        "scoop",
    ]
    cli_search_path = []
    dry_run = false
    ignore_auto_updates = true
    plan = false
    post_args = []
    pre_args = []
    pre_cmds = []
    requirement = ">=0.6.0"
    stop_on_error = false
    unmaintained = false
    version_cli_options = [
        "--version",
    ]
    version_regexes = [
        "^v(?P<version>\\S+)\\s.+",
    ]
    

Recipes

A few jobs you would otherwise script around scoop, one mpm command each:

  • Snapshot and clone a machine: mpm --scoop dump scoop.toml, then mpm restore scoop.toml on the next one.

  • Export a compliance SBOM: mpm --scoop sbom (CycloneDX by default, --spdx for SPDX).

  • Gate CI on health: mpm --scoop doctor relays Scoop’s own diagnosis and exits non-zero on trouble.

Privilege escalation

mpm runs this manager as the current user and never prepends sudo by default. Flip the policy for its privileged operations with --sudo or the per-manager sudo override.

None of its operations is privileged.

See privilege escalation for the full policy.

Concurrency

mpm never runs scoop at the same time as sfsu: they work on the same ~/scoop tree, sfsu delegating its mutating operations to the scoop binary itself. Each mutating operation waits for the previous one, even with a higher --jobs, while managers outside this group keep running in parallel.

Only mutations are held back. The read-only queries (installed, outdated, search) take no backend lock and stay fully concurrent.

Cooldown

State of Scoop’s release-age gating, from the cooldown support table:

A cooldown only pays off where a compromised release can be withdrawn while the clock runs, and can only be emulated where the registry dates its releases. From the retraction table:

  • Registry: Git-manifest indexes

  • Retraction: Index revert: reverting the manifest, Portfile or derivation commit withdraws the version

  • Publish date: ❌ only the commit date, which is client-set and trivially backdated. A date declared in the manifest, like winget’s optional ReleaseDate, is author-supplied too and no sounder

With --cooldown set, mpm skips this manager’s install and upgrade operations rather than run them unguarded (fail-closed); --cooldown best-effort opts back in.

Reference traces

A collection of raw native outputs captured from the manager’s own CLI and recorded in the manager source. If you know Scoop well and a transcript below looks wrong, or a newer release changed its output format, report it.

>  scoop list
Installed apps:

Name   Version          Source Updated             Info
----   -------          ------ -------             ----
7zip   22.01            main   2022-09-27 08:03:30
dark   3.11.2           main   2022-09-27 08:04:26
git    2.37.3.windows.1 main   2022-09-27 08:03:58
python 3.10.7           main   2022-09-27 08:04:53
> scoop status
Name           Installed Version Latest Version Missing Dependencies Info
----           ----------------- -------------- -------------------- ----
demulshooter   16.7.2            18.7.3
eduke32        20220611-10112    20220709-10115
Teracopy-np
yuzu-pineapple EA-2804           EA-2830

Version check

The version is probed by running:

$ scoop --version
Current Scoop version:
v0.6.0 - Released at 2026-09-30

'main' bucket:
22fbffff92 tombi: Update to version 1.6.1

'extras' bucket:
a149ee2c79 suwayomi-server: Update to version 2.4.2366

and extracted with:

r"^v(?P<version>\S+)\s.+"

Upstream project

Metrics

ScoopInstaller/Scoop

Activity

commit activity commits since open issues open pull requests

Popularity

forks watchers contributors

Metadata

latest release release date license main language

Changelog

  • 8.1.0.dev0 (unreleased)

    • Raise the Scoop floor to 0.6.0, which fixes its --version output. Run scoop update to upgrade an older install.

    • Install the requested version on mpm install <package>@<version> and mpm restore. Scoop pins such a package, so outdated and upgrade skip it.

  • 8.0.0 (2026-09-20)

    • Stop running sfsu concurrently with scoop, whose buckets and cache its own update and cleanup reach.

  • 6.4.0 (2026-04-27)

    • Fix CLI invocation in outdated operation.

  • 6.0.0 (2025-12-08)

    • Fix parsing of scoop version to support raw Git output.

  • 5.14.0 (2024-01-13)

    • Fix parsing of Scoop version.

  • 5.7.0 (2022-09-28)

    • Add support for Scoop on Windows. Closes #546.