Automic VaultAutomic Vault

brew

lerna mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für lerna in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install lerna

local Homebrew formula metadata

Überblick

Paketzusammenfassung

Tool for managing JavaScript projects with multiple packages

Verlauf

Projektgeschichte und Nutzung

Lerna is the original JavaScript and TypeScript monorepo tool, best known for coordinating package versioning and publishing across repositories containing many npm packages.

Projektgeschichte

The Lerna documentation says the tool was created in the 2015/2016 era, before npm, Yarn, and pnpm had mature built-in workspace support. Early Lerna commands such as bootstrap, add, and link filled a gap by installing external dependencies and linking local packages inside a multi-package repository.

As package managers added first-class workspace support, Lerna's role narrowed. The project documentation explains that v7.0.0 removed bootstrap, add, and link by default in June 2023, and v9.0.0 fully removed those commands in September 2025 after more than two years of deprecation.

Adoptionsgeschichte

Lerna's own introduction describes it as used by tens of thousands of projects, including React and Jest. Its adoption grew with the npm-package monorepo pattern, where maintainers needed to publish multiple related packages with coordinated or independent versions.

In May 2022, Nrwl, the company behind Nx, announced that it was taking over stewardship of Lerna. That transition tied Lerna's later development to Nx's task-running and project-graph machinery while keeping Lerna's familiar versioning and publishing workflow.

Wie es verwendet wird

Typical use starts with a repository-level lerna.json and package.json workspace configuration. Lerna can run tasks across packages, detect changed packages, bump versions, create git tags, and publish selected packages to npm.

Modern Lerna expects package managers to handle dependency installation and local linking. Lerna's maintained value is concentrated in monorepo orchestration, project graph integration, versioning, and publishing.

Warum Paket-Nerds sich dafür interessieren

Lerna is historically important because it made npm monorepos practical before workspaces became boring. Package maintainers cared because it encoded the release problem: many packages, linked locally, published separately, with changelogs and git tags that had to stay coherent.

Zeitleiste

  • 2015/2016: Lerna was created for JavaScript monorepos before package-manager workspaces were built in.
  • 2022: Nrwl announced it was taking over stewardship of Lerna.
  • 2023: Lerna v7.0.0 removed bootstrap, add, and link by default.
  • 2025: Lerna v9.0.0 fully removed the legacy package-management commands.

Related projects

  • Nx is the stewardship and build-system project closely associated with modern Lerna.
  • npm, Yarn, and pnpm workspaces replaced Lerna's legacy package-linking commands.
  • React and Jest are examples named by Lerna as projects that used it.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
lerna.jsonnx.jsonpackage.json

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
lernacliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version9.0.7
Manager aktualisiert
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://lerna.js.org

  • InfoNo package-manager update timestamp was available.niedrig Konfidenz
  • InfoRelease/tag comparison is only available for GitHub repositories.https://lerna.js.orgnone Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:lerna
Version9.0.7
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/lerna
Homepagehttps://lerna.js.org
Repositoryhttps://github.com/lerna/lerna
Upstream-Dokumentationhttps://lerna.js.org/docs/features
LizenzMIT
Quellarchivhttps://registry.npmjs.org/lerna/-/lerna-9.0.7.tgz
Abhängigkeitennode
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namelerna
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

lerna

nix profile install nixpkgs#lerna
  • normalized package name match
  • Abgeglichen nach: Lerna
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: lerna from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment