One issue I have with pass is that it leaks meta-data about what you have stored. The contents are encrypted, yes, but the filename identifying the content is sitting right there in the open.

Check out this similar gpg-based password manager, which uses just one encrypted container for improved confidentiality - https://github.com/drduh/pwd.sh

I've previously looked into this and stopped half way through migrating my lastpass. I have a rather naive question: For the replication across devices this tool relies on git, but where are folks setting up the origin?

I host mine on gogs.sr.ht, a private git service I run for myself and friends. I used to host it on a private GitHub repository. There are other options like a private Bitbucket repository, or even just a public repo on GitHub - since the passwords are all encrypted, you don't really have to worry about that.

I'll happily give an sr.ht account to anyone who wants one for this purpose, mention HN in your application comments: https://sr.ht

Can you approve @nikolay, please?

Looks like you requested an account in June of 2015? What's the story there?

You can also use keepassx with python-keepassx for cli access. https://github.com/jamesls/python-keepassx