Installation

The npm package has prebuilt binaries for macOS, Linux, and Windows. You do not need a Rust toolchain.

npm install -g fallow

pnpm add -g fallow

yarn global add fallow

Use this option if you already have a Rust toolchain.

cargo install fallow-cli

Use Docker to run fallow without Node.js, npm, or Rust on the host.

docker build -t fallow:local https://github.com/fallow-rs/fallow.git#main
docker run --rm -v "$PWD:/workspace" --user "$(id -u):$(id -g)" fallow:local audit --format json --quiet

The image runs fallow once as a CLI against /workspace. The --user mapping has two effects:

• Your host user owns the .fallow/ caches and the generated reports.
• fallow audit can detect the git base. Git's dubious-ownership guard does not block the mounted repository.

The image includes git, Node.js, npm, and Corepack. Fallow does not install your project dependencies automatically.

To use Compose, build the image first. Then copy examples/docker/compose.yaml into the target project and run:

docker compose run --rm fallow audit --format json --quiet

On Linux and WSL, the commands above work as written. On Windows outside WSL, pass an absolute project path that Docker Desktop accepts, and keep /workspace as the mounted working directory.

For runtime coverage inventory in a container, pass the container path prefix. The inventory paths then match the paths that the runtime beacon reports:

docker run --rm -v "$PWD:/workspace" --user "$(id -u):$(id -g)" fallow:local coverage upload-inventory --path-prefix /workspace --format json --quiet

Download a prebuilt binary from GitHub Releases.