pkg.soopen package index

brew / 排名 1722

使用 Homebrew, chocolatey, MacPorts, Nix, scoop, winget 安装 volta

查看 volta 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install volta

local Homebrew formula metadata

MacPorts已验证 · 94%
sudo port install volta

MacPorts ports tree · www/volta/Portfile · 来源: api.github.com

Linux

Nix已验证 · 92%
nix profile install nixpkgs#volta

nixpkgs package indexes · pkgs/by-name/vo/volta/package.nix · 来源: api.github.com

Windows

Chocolatey已验证 · 92%
choco install volta

Chocolatey community package catalog · volta · 来源: community.chocolatey.org

Scoop已验证 · 92%
scoop install main/volta

Scoop official bucket manifest trees · bucket/volta.json · 来源: api.github.com

Windows Package Manager已验证 · 92%
winget install --id Volta.Volta -e

Windows Package Manager source index · Volta.Volta · 来源: cdn.winget.microsoft.com

概览

软件包摘要

JavaScript toolchain manager for reproducible environments

命令和别名

  • volta
  • volta-migrate
  • volta-shim

历史

项目历史与用法

Volta is a Rust-built JavaScript toolchain manager whose central idea is to make Node.js, npm, Yarn, and package binaries project-aware through fast shims. Instead of asking developers to manually switch Node versions, it records tool choices in `package.json` and routes commands to the right cached executable.

项目历史

Volta began publicly as a project called Notion. Its v0.1.0 pre-release, published on August 21, 2018, supported macOS and Linux, Node and Yarn installation, `notion use`, and a proof-of-concept plugin API. The release history shows the project adding npm/npx support, package-binary installation, fish support, a `which` command, and other toolchain-manager features during the 0.x line.

The project renamed to Volta in version 0.5.0, changing the `package.json` key from `toolchain` to `volta` and adopting the JavaScript Launcher branding. Version 1.0.0 was released on December 21, 2020 with support for `npm link`, global update commands, and npm/Yarn handling improvements.

By 2025, the repository README and pinned issue stated that Volta was unmaintained and that maintainers recommended migrating to mise. That status does not erase Volta's earlier role, but it changes its package-history context from active toolchain bet to a stable-but-maintenance-limited utility.

采用历史

Volta gained traction among JavaScript developers as an alternative to shell-function based version switchers such as nvm because its shims work across projects and shells and because pinned versions live in a file already committed by most Node projects. Its GitHub repository shows broad open-source adoption, with thousands of stars and packaging across macOS, Linux, and Windows ecosystems.

Its documentation emphasizes reproducible collaborator environments: `volta pin node@20` writes the selected engine into `package.json`, and collaborators who install Volta automatically get the same Node version when they enter the project directory. This made Volta part of the broader shift toward checking toolchain versions into application repositories.

使用方式

Typical use starts with `volta install node` or `volta install node@22` to set a default Node runtime. Inside a project, `volta pin node@20` or a similar command records the exact runtime or package-manager version in `package.json`; later invocations of `node`, `npm`, or `yarn` are routed by Volta's shims.

Volta also manages globally installed package binaries. The docs describe installing command-line tools through npm or Yarn while Volta pins the Node version used for that tool, so a globally installed executable keeps working even when the user's default Node version changes.

为什么软件包爱好者会关心

Volta is package-nerd significant because it treats the JavaScript runtime as package metadata. The interesting bit is not merely downloading Node; it is committing the runtime and package-manager versions beside dependencies so developer laptops, CI jobs, and cloned repos converge on the same toolchain.

Its later unmaintained status is also instructive: toolchain managers sit in the blast radius of operating systems, package registries, and runtime distribution changes, so maintenance health becomes part of the package story, not just an upstream README footnote.

时间线

  • 2018-08-21: v0.1.0 pre-release was published under the original Notion command naming.
  • 2019: The 0.x release line added npm/npx support, package binaries, fish support, and related toolchain-manager features.
  • Version 0.5.0: The project renamed to Volta and changed the `package.json` key from `toolchain` to `volta`.
  • 2020-12-21: Volta v1.0.0 was released.
  • 2025-11-14: A pinned GitHub issue announced that Volta was unmaintained and recommended migration to mise.

Related projects

  • nvm, asdf, fnm, mise, and Corepack occupy adjacent JavaScript or multi-runtime toolchain-management space.
  • Node.js, npm, Yarn, and pnpm are the runtimes and package managers that Volta routes or pins.

安全态势

风险级别:orange

infrastructure mutation or orchestration signal.

风险分类器

orange 风险 · 中 置信度 · infrastructure

原因

  • infrastructure mutation or orchestration signal

信号

  • text:toolchain manager

安装行为

  • 未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
package.json
Windows
package.json

可执行文件

已安装的可执行文件

命令类型暴露范围备注
volta可执行文件已索引可执行文件从本地可执行文件索引发现。
volta-migrate可执行文件已索引可执行文件从本地可执行文件索引发现。
volta-shim可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-08-03
管理器版本2.0.2
管理器更新时间
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:volta
版本2.0.2
软件包管理器Homebrew
主页https://volta.sh
仓库https://github.com/volta-cli/volta
Bottle未记录
服务未声明

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

volta

nix profile install nixpkgs#volta
  • normalized package name match
  • 匹配方式:Volta
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/vo/volta/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
MacPorts95%

volta

sudo port install volta
  • normalized package name match
  • 匹配方式:Volta
MacPorts ports tree · api.github.com · MacPorts ports tree: www/volta/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

volta

choco install volta
  • normalized package name match
  • 匹配方式:Volta
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: volta from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','visualstudio2022enterprise'
Scoop95%

main/volta

scoop install main/volta
  • normalized package name match
  • 匹配方式:Volta
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/volta.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

Volta.Volta

winget install --id Volta.Volta -e
  • normalized package name match
  • 匹配方式:Volta
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Volta.Volta from https://cdn.winget.microsoft.com/cache/source.msix

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation