# Install lockfile-lint with npm

A CLI to lint a lockfile for security policies. Version 5.0.0 via npm; verified 2026-01-25.

## Install

```sh
sudo av install npm:lockfile-lint
```

Additional install commands:

### Portable and language managers

- npm (100%):

```sh
npm install -g lockfile-lint
```

  Evidence: local npm package metadata

## Package facts

- **Package key:** npm:lockfile-lint
- **Package manager:** npm
- **Package manager page:** <https://www.npmjs.com/package/lockfile-lint>
- **Version:** 5.0.0
- **Source summary:** A CLI to lint a lockfile for security policies
- **Homepage:** <https://github.com/lirantal/lockfile-lint/tree/master/packages/lockfile-lint>
- **Repository:** <https://github.com/lirantal/lockfile-lint>
- **Upstream docs:** <https://github.com/lirantal/lockfile-lint/tree/master/packages/lockfile-lint>
- **License:** Apache-2.0
- **Source archive:** <https://registry.npmjs.org/lockfile-lint/-/lockfile-lint-5.0.0.tgz>
- **Issue tracker:** <https://github.com/lirantal/lockfile-lint/tree/master/packages/lockfile-lint/issues>
- **Published:** 2026-01-25T15:12:43.365Z
- **Last updated:** 2026-01-25T15:12:43.365Z
- **Generated:** 2026-08-04T22:13:35+00:00

## Executables

- lockfile-lint (cli)
- lockfile-lint (alias)

## Dependencies

- cosmiconfig
- debug
- fast-glob
- lockfile-lint-api
- yargs

## Build dependencies

- babel-eslint
- babel-plugin-syntax-async-functions
- babel-plugin-transform-regenerator
- babel-preset-env
- babel-preset-es2015
- docco
- doxdox
- eslint
- eslint-config-standard
- eslint-plugin-import
- eslint-plugin-jest
- eslint-plugin-node
- eslint-plugin-promise
- eslint-plugin-security
- eslint-plugin-standard
- jest
- open-cli
- prettier-standard
- semver

## Install behavior

- Post-install hook: not defined
- Bottle: not available

## Freshness

- Page generated: 2026-08-04
- Package-manager version: 5.0.0
- Package-manager updated: 2026-01-25
- Local data: ok
- Upstream repository: https://github.com/lirantal/lockfile-lint
- notice: The package-manager record has not changed recently.
- info: No cached GitHub release or tag data was available.

## Security Notes

No matching local secret-handling manifest was found for lockfile-lint. Package metadata is still published here so future coverage has a stable package URL.


## Source Database Details

- **Source Database:** npm registry
- **Dist Tags:** Latest: 5.0.0
- **Version Count:** 76
- **Maintainers:** lirantal, lirantal_bot
- **Author:** Liran Tal
- **Publisher:** GitHub Actions
- **Engines:** Node: >=16.0.0
- **Integrity:** sha512-QcVIVITLZAhWYHU2wbNSOMgwc6EN4Y2sy6mjgS5aikYyRzgDIfotXUsCrm38En+3fZpc58Yu7DF9dNeT/goi1A==
- **Shasum:** 052a11c150e328bb5fb548b071ebcd2df70614bc
- **Unpacked Size:** 39,142
- **File Count:** 0
- **Created At:** 2019-06-18T18:03:55.454Z
- **Latest Published At:** 2026-01-25T15:12:43.365Z
- **Modified At:** 2026-01-25T15:12:43.624Z


## Related links

- [Security and crypto packages](https://pkg.so/security-crypto-tools/) - Matched curated package taxonomy and local package facts.
- [lavamoat](https://pkg.so/npm/lavamoat/) - Security-sensitive metadata or terminology overlaps. Shared terms: chain, cli, security, supply, supply-chain-security.
- [yarn-audit-fix](https://pkg.so/npm/yarn-audit-fix/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, fast, fast-glob, glob, lockfile.
- [npm-audit-html](https://pkg.so/npm/npm-audit-html/) - Security-sensitive metadata or terminology overlaps. Shared terms: chain, cli, npm, security, supply.

## Sources

- pkg.so package database
- package-page enrichment
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph