Automic VaultAutomic Vault

brew

corepack mit Homebrew, Nix, pacman, zypper installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für corepack in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install corepack

local Homebrew formula metadata

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#corepack

nixpkgs package indexes · pkgs/by-name/co/corepack/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S corepack

Arch Linux sync databases · corepack · Quelle: geo.mirror.pkgbuild.com

openSUSE zypperverifiziert · 92%
sudo zypper install corepack-default

openSUSE Tumbleweed package metadata · corepack-default · Quelle: download.opensuse.org

Überblick

Paketzusammenfassung

Package acting as bridge between Node projects and their package managers

Befehle und Aliase

  • corepack

Verlauf

Projektgeschichte und Nutzung

Corepack is a Node.js package-manager shim and version manager that bridges a project to the package manager version it declares. It is most associated with Yarn and pnpm workflows, where the package.json packageManager field can select the expected tool and version.

Projektgeschichte

The nodejs/corepack repository was created in 2020. Its README describes Corepack as a zero-runtime-dependency Node.js script that lets projects use Yarn, npm, and pnpm without installing each package manager globally.

Corepack was distributed with Node.js from version 14.19.0 up to, but not including, 25.0.0. That bundling made it a notable piece of Node's package-management story even for users who never installed the standalone package directly.

Adoptionsgeschichte

Corepack adoption followed the rise of package-manager pinning in JavaScript projects. Instead of relying on whatever yarn or pnpm binary happened to be globally installed, a project could declare the package manager in package.json and let Corepack fetch or activate a compatible version.

Wie es verwendet wird

Common usage is to enable Corepack, then run package-manager commands such as yarn install or pnpm install in a project. Corepack reads package.json metadata, resolves the intended package manager version, and manages cached package-manager binaries rather than acting as the dependency installer itself.

Warum Paket-Nerds sich dafür interessieren

Corepack is package-nerd infrastructure about package managers themselves. It moved version pinning for Yarn and pnpm closer to the Node runtime and made the package.json packageManager field operational, which changed how distributions and CI images think about globally installed JavaScript package tools.

Zeitleiste

  • 2020: nodejs/corepack repository created.
  • 2021-2022: Corepack distributed with Node.js 14.19.0 and newer supported Node release lines.
  • 2026: v0.35.0 released upstream as Node.js no longer bundles Corepack starting with the Node 25 line.

Related projects

  • Corepack is related to Node.js, npm, Yarn, pnpm, the package.json packageManager field, and JavaScript CI/runtime distribution images.

Sicherheitslage

Risikostufe: orange

infrastructure mutation or orchestration signal.

Risikoklassifikator

orange Risiko · mittel Konfidenz · infrastructure

Warum

  • infrastructure mutation or orchestration signal

Signale

  • text:package manager

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 1 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
package.json

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
corepackcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version0.35.0
Manager aktualisiert2026-05-15
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://github.com/nodejs/corepack

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:corepack
Version0.35.0
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/corepack
Homepagehttps://github.com/nodejs/corepack
Repositoryhttps://github.com/nodejs/corepack
Upstream-Dokumentationhttps://github.com/nodejs/corepack#readme
LizenzMIT
Quellarchivhttps://registry.npmjs.org/corepack/-/corepack-0.35.0.tgz
Zuletzt aktualisiert2026-05-15T21:25:02Z
Pulseupdated
Abhängigkeitennode
Bottleverfügbar (auf all)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecorepack
Version Scheme0
Revision0
Conflicts With
  • hadoop
  • pnpm
  • yarn
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

corepack

nix profile install nixpkgs#corepack
  • normalized package name match
  • Abgeglichen nach: Corepack
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/co/corepack/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
pacman95%

corepack 0.34.6-1

Zero-runtime-dependency Node.js script

https://github.com/nodejs/corepack

sudo pacman -S corepack
  • License: MIT
  • Architecture: any
  • 1 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Corepack
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: corepack from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

corepack-default 6.1-5.2

Default version of corepack

https://github.com/AdamMajer/nodejs-packaging

sudo zypper install corepack-default
  • License: MIT
  • Category: Development/Languages/NodeJS
  • Architecture: x86_64
  • Source Package: nodejs-common
  • 2 Abhängigkeiten
  • 2 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Corepack
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: corepack-default from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment