pkg.soopen package index

npm / rank 1663

Install metalsmith with npm

An extremely simple, pluggable static site generator. Version 2.7.0 via npm; verified 2026-02-09.

install

Additional install commands

Portable and language managers

npmverified · 100%
npm install -g metalsmith

local npm package metadata

overview

Package summary

An extremely simple, pluggable static site generator.

Commands and aliases

  • metalsmith

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for metalsmith. Package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No npm postinstall script is recorded in package metadata.
  • No Homebrew bottle metadata was recorded.
  • Installs with 9 runtime dependencies.
  • Build metadata lists 18 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
metalsmithcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-04
manager version2.7.0
manager updated2026-02-09
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/metalsmith/metalsmith

install metadata

Package metadata

Package keynpm:metalsmith
Version2.7.0
Package managernpm
Package manager pagehttps://www.npmjs.com/package/metalsmith
Homepagehttps://metalsmith.io
Repositoryhttps://github.com/metalsmith/metalsmith
Upstream docshttps://metalsmith.io
LicenseMIT
Source archivehttps://registry.npmjs.org/metalsmith/-/metalsmith-2.7.0.tgz
Issue trackerhttps://github.com/metalsmith/metalsmith/issues
Last updated2026-02-09T21:05:00.285Z
Published2026-02-09T21:05:00.285Z
Dependencieschokidar, commander, debug, gray-matter, is-utf8, lodash.clonedeepwith, micromatch, stat-mode, ware
Build dependencies@eslint/eslintrc, @eslint/js, @metalsmith/drafts, @metalsmith/markdown, @types/debug, @types/micromatch, @types/node, assert-dir-equal, c8, eslint, eslint-plugin-import, eslint-plugin-n, globals, mocha, prettier, release-it, toml, typescript
Bottlenot recorded
npm postinstallnot defined
Servicenone declared
Keywordsstatic, jamstack, file, site, website, blog, generator, markdown, jekyll, metalsmith, yaml

registry facts

Source database details

Source Databasenpm registry
Dist Tags
Version Count51
Maintainers
  • woodyrew
  • ianstormtaylor
  • dominicbarnes
  • ajedi32
  • webketje
Publisherwebketje
Engines
Integritysha512-DkoXO1jz0UY+k1tj1LpxYLrN+jeGKBicbtsQYeYF8nX9QK4AGyGh4g421qsmEOGfZ02GjW1qxr1XP+8afwcTGQ==
Shasumfedb2f6db780879ef91e9a400b60c840525ac402
Unpacked Size119,539
File Count0
Created At2014-02-05T05:23:38.888Z
Latest Published At2026-02-09T21:05:00.285Z
Modified At2026-02-09T21:05:00.403Z

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • cross-ecosystem install command graph
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation