# Install pacote with npm

JavaScript package downloader. Version 22.0.0 via npm; verified 2026-06-15.

## Install

```sh
sudo av install npm:pacote
```

Additional install commands:

### Portable and language managers

- npm (100%):

```sh
npm install -g pacote
```

  Evidence: local npm package metadata

## Package facts

- **Package key:** npm:pacote
- **Package manager:** npm
- **Package manager page:** <https://www.npmjs.com/package/pacote>
- **Version:** 22.0.0
- **Source summary:** JavaScript package downloader
- **Homepage:** <https://github.com/npm/pacote#readme>
- **Repository:** <https://github.com/npm/pacote>
- **Upstream docs:** <https://github.com/npm/pacote#readme>
- **License:** ISC
- **Source archive:** <https://registry.npmjs.org/pacote/-/pacote-22.0.0.tgz>
- **Issue tracker:** <https://github.com/npm/pacote/issues>
- **Published:** 2026-06-15T20:14:26.866Z
- **Last updated:** 2026-06-15T20:14:26.866Z
- **Generated:** 2026-08-04T22:13:35+00:00

## Executables

- pacote (cli)
- pacote (alias)

## Dependencies

- @gar/promise-retry
- @npmcli/git
- @npmcli/installed-package-contents
- @npmcli/package-json
- @npmcli/promise-spawn
- @npmcli/run-script
- cacache
- fs-minipass
- minipass
- npm-package-arg
- npm-packlist
- npm-pick-manifest
- npm-registry-fetch
- proc-log
- sigstore
- ssri
- tar

## Build dependencies

- @npmcli/arborist
- @npmcli/eslint-config
- @npmcli/template-oss
- hosted-git-info
- mutate-fs
- nock
- npm-registry-mock
- rimraf
- tap

## Install behavior

- Post-install hook: not defined
- Bottle: not available

## Freshness

- Page generated: 2026-08-04
- Package-manager version: 22.0.0
- Package-manager updated: 2026-06-15
- Local data: ok
- Upstream repository: https://github.com/npm/pacote
- info: No cached GitHub release or tag data was available.

## Security Notes

No matching local secret-handling manifest was found for pacote. Package metadata is still published here so future coverage has a stable package URL.


## Source Database Details

- **Source Database:** npm registry
- **Dist Tags:** Latest: 22.0.0, Latest 19: 19.0.2, Latest 20: 20.0.1, Prerelease: 14.0.0-pre.3, V9 Legacy: 9.5.12
- **Version Count:** 238
- **Maintainers:** saquibkhan, npm-cli-ops, reggi
- **Author:** GitHub Inc.
- **Publisher:** GitHub Actions
- **Engines:** Node: ^22.22.2 || ^24.15.0 || >=26.0.0
- **Integrity:** sha512-++VqeOZeL03uGM2MFLk96jGCSt1owBGkyFKoPr+trwNlZhCpjN2RrvwYxt8nTbs1wNMqSFYurq0TafVWkAIHig==
- **Shasum:** 6e328e76c648ee01ea76304b878b0979eda08c76
- **Unpacked Size:** 80,176
- **File Count:** 0
- **Created At:** 2016-11-27T05:22:19.659Z
- **Latest Published At:** 2026-06-15T20:14:26.866Z
- **Modified At:** 2026-07-06T14:04:57.233Z


## Related links

- [Web development packages](https://pkg.so/web-dev-tools/) - Matched curated package taxonomy and local package facts.
- [testem](https://pkg.so/npm/testem/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, developer, developer-tools, javascript, log.
- [prepin](https://pkg.so/npm/prepin/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, cli-tools, developer, developer-tools, javascript.
- [run-script-os](https://pkg.so/npm/run-script-os/) - Local package facts share a topical domain. Shared terms: cli, cli-tools, developer, developer-tools, npm.

## Sources

- pkg.so package database
- package-page enrichment
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph