# Install lavamoat-core with npm

LavaMoat kernel and utils. Version 18.0.5 via npm; verified 2026-06-25.

## Install

```sh
sudo av install npm:lavamoat-core
```

Additional install commands:

### Portable and language managers

- npm (100%):

```sh
npm install -g lavamoat-core
```

  Evidence: local npm package metadata

## Package facts

- **Package key:** npm:lavamoat-core
- **Package manager:** npm
- **Package manager page:** <https://www.npmjs.com/package/lavamoat-core>
- **Version:** 18.0.5
- **Source summary:** LavaMoat kernel and utils
- **Homepage:** <https://github.com/LavaMoat/lavamoat#readme>
- **Repository:** <https://github.com/LavaMoat/lavamoat>
- **Upstream docs:** <https://github.com/LavaMoat/lavamoat#readme>
- **License:** MIT
- **Source archive:** <https://registry.npmjs.org/lavamoat-core/-/lavamoat-core-18.0.5.tgz>
- **Issue tracker:** <https://github.com/LavaMoat/lavamoat/issues>
- **Published:** 2026-06-25T12:05:09.142Z
- **Last updated:** 2026-06-25T12:05:09.142Z
- **Generated:** 2026-08-04T22:13:35+00:00

## Executables

- lavamoat-sort-policy (cli)
- lavamoat-sort-policy (alias)

## Dependencies

- @babel/types
- @lavamoat/types
- json-stable-stringify
- lavamoat-tofu
- ses

## Build dependencies

- tmp-promise

## Install behavior

- Post-install hook: not defined
- Bottle: not available

## Freshness

- Page generated: 2026-08-04
- Package-manager version: 18.0.5
- Package-manager updated: 2026-06-25
- Local data: ok
- Upstream repository: https://github.com/LavaMoat/lavamoat
- info: No cached GitHub release or tag data was available.

## Security Notes

No matching local secret-handling manifest was found for lavamoat-core. Package metadata is still published here so future coverage has a stable package URL.


## Source Database Details

- **Source Database:** npm registry
- **Dist Tags:** Latest: 18.0.5
- **Version Count:** 95
- **Maintainers:** kumavis, naugtur, boneskull
- **Author:** kumavis
- **Publisher:** GitHub Actions
- **Engines:** Node: ^20.19.0 || ^22.5.1 || ^24.0.0
- **Integrity:** sha512-lxwsTxZcdmZ9UfvhGEIaUg+5G6m1FumS6GzuJSNtikMRvVCZ8nviYTjLVYMb8puNjHwIBAuA70yexTgbOkr6AA==
- **Shasum:** 9a05b67d3ce0da9aebd7c085838db9baecbd19e0
- **Unpacked Size:** 719,992
- **File Count:** 0
- **Created At:** 2020-03-25T09:44:54.730Z
- **Latest Published At:** 2026-06-25T12:05:09.142Z
- **Modified At:** 2026-06-25T12:05:09.432Z


## Related links

- [Security and crypto packages](https://pkg.so/security-crypto-tools/) - Matched curated package taxonomy and local package facts.
- [lavamoat](https://pkg.so/npm/lavamoat/) - Security-sensitive metadata or terminology overlaps. Shared terms: babel, chain, cli, core, dependencies.
- [lockfile-lint](https://pkg.so/npm/lockfile-lint/) - Security-sensitive metadata or terminology overlaps. Shared terms: chain, cli, security, supply, supply-chain-security.
- [npm-audit-html](https://pkg.so/npm/npm-audit-html/) - Security-sensitive metadata or terminology overlaps. Shared terms: chain, cli, security, supply, supply-chain-security.

## Sources

- pkg.so package database
- package-page enrichment
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph