nfpm

by goreleaserv2.47.0

Last updated Jul 27, 2026

nFPM is Not FPM - a simple deb, rpm, apk, ipk, and arch linux packager written in Go.

Install with winget

$ winget install --id goreleaser.nfpm --exact --version 2.47.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For IT teams

Deploy this app to your whole fleet with Pckgr RMM.

App deployment, patching, and remote support in one place. Push this app to every device you manage, keep it patched automatically, and see new CVEs the moment they land. Works with Intune or fully standalone.

Free for up to 5 devices.

About

Simple, 0-dependencies, deb, rpm, apk, ipk, and arch linux packager.

nFPM (not FPM) is configurable via YAML and does not need any

packaging software installed.

Installers · v2.47.0

Architecture	Type	Scope	Install	Download
x64	Portable	-		Direct
arm64	Portable	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

1 known CVE via NVD

high7.1Patched in wingetCVE-2023-32698affects before 2.29.0May 29, 2023
nFPM is an alternative to fpm. The file permissions on the checked-in files were not maintained. Hence, when nfpm packaged the files (without extra config for enforcing it’s own permissions) files could go out with bad permissions (chmod 666 or 777). Anyone using nfpm for creat...
Patch Vendor advisory

Source: NVD, updated 3h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Pckgr RMM flags vulnerable devices and pushes the patched version automatically.

Related apps

mcpgoreleaser
goreleaser.mcpv0.5.1
GoReleaser MCP server
goreleaser-progoreleaser
goreleaser.goreleaser-prov2.17.0
Release engineering, simplified
goreleasergoreleaser
goreleaser.goreleaserv2.17.0
Release engineering, simplified

Frequently asked questions

How do I install nfpm on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id goreleaser.nfpm --exact --version 2.47.0. winget downloads the installer from goreleaser and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install nfpm silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id goreleaser.nfpm --exact 2.47.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall nfpm via winget?

Run: winget uninstall --id goreleaser.nfpm --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from nfpm's Apps & Features entry.

Is nfpm free?

nfpm is distributed under MIT. Refer to the publisher (https://nfpm.goreleaser.com) for the full license terms - Wingetly itself does not charge for installation.

Does nfpm work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls nfpm directly from the publisher.

How do I keep nfpm up to date?

Run winget upgrade --id goreleaser.nfpm --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of nfpm from microsoft/winget-pkgs.

Recent versions

2.47.0latest
2.46.3
2.46.1
2.46.0
2.45.2
2.45.1
2.45.0
2.44.2
2.44.1
2.43.4