# Install pompelmi with npm

ClamAV for humans — scan any file and get back Clean, Malicious, or ScanError. No daemons. No cloud. No native bindings. Version 1.20.0 via npm; verified 2026-05-15.

## Install

```sh
sudo av install npm:pompelmi
```

Additional install commands:

### Portable and language managers

- npm (100%):

```sh
npm install -g pompelmi
```

  Evidence: local npm package metadata

## Package facts

- **Package key:** npm:pompelmi
- **Package manager:** npm
- **Package manager page:** <https://www.npmjs.com/package/pompelmi>
- **Version:** 1.20.0
- **Source summary:** ClamAV for humans — scan any file and get back Clean, Malicious, or ScanError. No daemons. No cloud. No native bindings.
- **Homepage:** <https://pompelmi.app>
- **Repository:** <https://github.com/pompelmi/pompelmi>
- **Upstream docs:** <https://pompelmi.app>
- **License:** ISC
- **Source archive:** <https://registry.npmjs.org/pompelmi/-/pompelmi-1.20.0.tgz>
- **Issue tracker:** <https://github.com/pompelmi/pompelmi/issues>
- **Published:** 2026-05-15T14:55:24.881Z
- **Last updated:** 2026-05-15T14:55:24.881Z
- **Generated:** 2026-08-04T22:13:35+00:00

## Executables

- pompelmi (cli)
- pompelmi (alias)

## Dependencies

- terminal-image

## Build dependencies

- @eslint/js
- eslint
- globals

## Install behavior

- Post-install hook: defined
- Lifecycle scripts: postinstall
- Bottle: not available

## Freshness

- Page generated: 2026-08-04
- Package-manager version: 1.20.0
- Package-manager updated: 2026-05-15
- Local data: ok
- Upstream repository: https://github.com/pompelmi/pompelmi
- info: No cached GitHub release or tag data was available.

## Security Notes

No matching local secret-handling manifest was found for pompelmi. Package metadata is still published here so future coverage has a stable package URL.


## Source Database Details

- **Source Database:** npm registry
- **Dist Tags:** Latest: 1.20.0
- **Version Count:** 141
- **Maintainers:** justsouichi
- **Author:** pompelmi contributors
- **Publisher:** justsouichi
- **Integrity:** sha512-lDZJB6tHuYCOShCXZpu1TPoelU7gZPb1GczzS4fu3xaO0CsVsvxy//VFNlGwWTyNNbkBd1HLLBlBNDZdzSLAvg==
- **Shasum:** 7490e13695b5a6aa3322f81aea0b597d8790422e
- **Unpacked Size:** 2,924,600
- **File Count:** 0
- **Created At:** 2025-07-25T11:25:52.733Z
- **Latest Published At:** 2026-05-15T14:55:24.881Z
- **Modified At:** 2026-05-15T14:55:25.061Z


## Related links

- [Security and crypto packages](https://pkg.so/security-crypto-tools/) - Matched curated package taxonomy and local package facts.
- [carrot-scan](https://pkg.so/npm/carrot-scan/) - Security-sensitive metadata or terminology overlaps. Shared terms: antivirus, cli, fastify, malware, scan.
- [delivery-intel](https://pkg.so/npm/delivery-intel/) - Security-sensitive metadata or terminology overlaps. Shared terms: any, cli, no, scan, security.
- [owasp-dependency-check](https://pkg.so/npm/owasp-dependency-check/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, scanning, security, security-tools, vulnerability.

## Sources

- pkg.so package database
- package-page enrichment
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph
