# 使用 npm 安装 carrot-scan

查看 carrot-scan 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install npm:carrot-scan
```

其他安装命令:

### 便携式和语言管理器

- npm (100%):

```sh
npm install -g carrot-scan
```

  证据: local npm package metadata

## 软件包事实

- **软件包键:** npm:carrot-scan
- **软件包管理器:** npm
- **软件包管理器页面:** <https://www.npmjs.com/package/carrot-scan>
- **版本:** 6.0.1
- **来源摘要:** Command-line tool for detecting vulnerabilities in files and directories.
- **主页:** <https://github.com/SonoTommy/carrot-scan#readme>
- **仓库:** <https://github.com/SonoTommy/carrot-scan>
- **上游文档:** <https://github.com/SonoTommy/carrot-scan#readme>
- **许可证:** MIT
- **源码归档:** <https://registry.npmjs.org/carrot-scan/-/carrot-scan-6.0.1.tgz>
- **问题跟踪器:** <https://github.com/SonoTommy/carrot-scan/issues>
- **发布时间:** 2025-07-07T09:58:52.520Z
- **最后更新:** 2025-07-07T09:58:52.520Z
- **已生成:** 2026-08-04T22:13:35+00:00

## 可执行文件

- carrot-scan (cli)
- carrot-scan (别名)

## 依赖

- @carrot-scan/core
- @fastify/swagger
- @fastify/swagger-ui
- chalk
- commander
- fastify
- figlet
- inquirer
- open
- open-cli
- yaml

## 构建依赖

- @eslint/js
- eslint
- eslint-config-prettier
- eslint-plugin-import
- eslint-plugin-prettier
- eslint-plugin-security
- eslint-plugin-unicorn
- execa
- globals
- jest
- jest-cli
- js-x-ray
- prettier
- semgrep

## 安装行为

- post-install 钩子: 已定义
- npm 生命周期脚本: postinstall
- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-04
- 管理器版本: 6.0.1
- 管理器更新时间: 2025-07-07
- 本地数据: OK
- 上游仓库: https://github.com/SonoTommy/carrot-scan
- 警告: The package-manager record has not been updated in over a year.
- 信息: No cached GitHub release or tag data was available.

## 安全说明

没有找到 carrot-scan 的匹配本地密钥处理 manifest。软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。


## 源数据库详情

- **Source Database:** npm registry
- **Dist Tags:** Canary: 6.0.4-canary.4, Latest: 6.0.1
- **Version Count:** 27,708
- **Maintainers:** justsouichi
- **Author:** SonoTommy [https://github.com/SonoTommy]
- **Publisher:** justsouichi
- **Funding:** <https://ko-fi.com/sonotommy>
- **Integrity:** sha512-y2sdPDCpOD5YJ87Qm81hrwHn8vTckMQGcvPvdQ+hLuhoB+VAdOVj54KFQQhZmkMUbYaAAeRdnLcSAb4gKGn+Iw==
- **Shasum:** 9c8b4efb64534d439c28d7f13a8a8637cd6c4a31
- **Unpacked Size:** 202,448
- **File Count:** 0
- **Created At:** 2025-06-23T20:17:40.124Z
- **Latest Published At:** 2025-07-07T09:58:52.520Z
- **Modified At:** 2025-07-07T11:22:49.790Z


## 相关链接

- [Security and crypto packages](https://pkg.so/zh-hans/security-crypto-tools/) - Matched curated package taxonomy and local package facts.
- [auditjs](https://pkg.so/zh-hans/npm/auditjs/) - Both packages work with overlapping file formats or content types. Shared terms: api, chalk, cli, figlet, scan.
- [yarn-audit-fix](https://pkg.so/zh-hans/npm/yarn-audit-fix/) - Both packages work with overlapping file formats or content types. Shared terms: chalk, cli, commander, fast, scanning.
- [retire](https://pkg.so/zh-hans/npm/retire/) - Security-sensitive metadata or terminology overlaps. Shared terms: analysis, cli, commander, detecting, scanning.

## 来源

- pkg.so package database
- package-page enrichment
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph