pkg.soopen package index

npm / rank 1536

Install lavamoat-core with npm

LavaMoat kernel and utils. Version 18.0.5 via npm; verified 2026-06-25.

Install commandSecurity notes

install

Additional install commands

Portable and language managers

npmverified · 100%
npm install -g lavamoat-core

local npm package metadata

overview

Package summary

LavaMoat kernel and utils

Commands and aliases

  • lavamoat-sort-policy

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for lavamoat-core. Package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No npm postinstall script is recorded in package metadata.
  • No Homebrew bottle metadata was recorded.
  • Installs with 5 runtime dependencies.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
lavamoat-sort-policycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-04
manager version18.0.5
manager updated2026-06-25
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/LavaMoat/lavamoat

install metadata

Package metadata

Package keynpm:lavamoat-core
Version18.0.5
Package managernpm
Package manager pagehttps://www.npmjs.com/package/lavamoat-core
Homepagehttps://github.com/LavaMoat/lavamoat#readme
Repositoryhttps://github.com/LavaMoat/lavamoat
Upstream docshttps://github.com/LavaMoat/lavamoat#readme
LicenseMIT
Source archivehttps://registry.npmjs.org/lavamoat-core/-/lavamoat-core-18.0.5.tgz
Issue trackerhttps://github.com/LavaMoat/lavamoat/issues
Last updated2026-06-25T12:05:09.142Z
Published2026-06-25T12:05:09.142Z
Pulseupdated
Dependencies@babel/types, @lavamoat/types, json-stable-stringify, lavamoat-tofu, ses
Build dependenciestmp-promise
Bottlenot recorded
npm postinstallnot defined
Servicenone declared

registry facts

Source database details

Source Databasenpm registry
Dist Tags
Latest
18.0.5
Version Count95
Maintainers
  • kumavis
  • naugtur
  • boneskull
Authorkumavis
PublisherGitHub Actions
Engines
Node
^20.19.0 || ^22.5.1 || ^24.0.0
Integritysha512-lxwsTxZcdmZ9UfvhGEIaUg+5G6m1FumS6GzuJSNtikMRvVCZ8nviYTjLVYMb8puNjHwIBAuA70yexTgbOkr6AA==
Shasum9a05b67d3ce0da9aebd7c085838db9baecbd19e0
Unpacked Size719,992
File Count0
Created At2020-03-25T09:44:54.730Z
Latest Published At2026-06-25T12:05:09.142Z
Modified At2026-06-25T12:05:09.432Z

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Same workflow

  • lavamoatSecurity-sensitive metadata or terminology overlaps. Shared terms: babel, chain, cli, core, dependencies.
  • lockfile-lintSecurity-sensitive metadata or terminology overlaps. Shared terms: chain, cli, security, supply, supply-chain-security.
  • npm-audit-htmlSecurity-sensitive metadata or terminology overlaps. Shared terms: chain, cli, security, supply, supply-chain-security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • cross-ecosystem install command graph
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation