Automic VaultAutomic Vault

npm / rank 604

Install lavamoat-core

LavaMoat kernel and utils. Version 18.0.4 via npm; verified 2026-05-28.

Install commandSecurity notes

install

Install with Automic Vault

Automic Vault
Download AV
sudo av install npm:lavamoat-core

Portable and language managers

npmverified ยท 100%
npm install -g lavamoat-core

local npm package metadata

Platform notes

  • No package-specific platform notes were present.

overview

Package summary

LavaMoat kernel and utils

Commands and aliases

  • lavamoat-sort-policy

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for lavamoat-core. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No npm postinstall script is recorded in package metadata.
  • No Homebrew bottle metadata was recorded.
  • Installs with 5 runtime dependencies.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
lavamoat-sort-policycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-06-10
manager version18.0.4
manager updated2026-05-28
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/LavaMoat/lavamoat

install metadata

Package metadata

Package keynpm:lavamoat-core
Version18.0.4
Package managernpm
Package manager pagehttps://www.npmjs.com/package/lavamoat-core
Homepagehttps://github.com/LavaMoat/lavamoat#readme
Repositoryhttps://github.com/LavaMoat/lavamoat
Upstream docshttps://github.com/LavaMoat/lavamoat#readme
LicenseMIT
Source archivehttps://registry.npmjs.org/lavamoat-core/-/lavamoat-core-18.0.4.tgz
Issue trackerhttps://github.com/LavaMoat/lavamoat/issues
Last updated2026-05-28T21:27:26.059Z
Published2026-05-28T21:27:26.059Z
Dependencies@babel/types, @lavamoat/types, json-stable-stringify, lavamoat-tofu, ses
Build dependenciestmp-promise
Bottlenot recorded
npm postinstallnot defined
Servicenone declared

registry facts

Source database details

Source Databasenpm registry
Dist Tags
Latest
18.0.4
Version Count94
Maintainers
  • kumavis
  • naugtur
  • boneskull
Authorkumavis
PublisherGitHub Actions
Engines
Node
^20.19.0 || ^22.5.1 || ^24.0.0
Integritysha512-1j8fEhiVpkEFwH3R+dMp8/2vhQQy6dewrHlWkzSOKe/6b0Dic/hqQ84wiQXMok8jRjKtquf2hTYlWX9hHKvZlQ==
Shasumdead0d97f12bdb8c0d08f09521aa64a2417c228a
Unpacked Size719,465
File Count0
Created At2020-03-25T09:44:54.730Z
Latest Published At2026-05-28T21:27:26.059Z
Modified At2026-05-28T21:27:26.336Z

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • lavamoatPackage names and metadata indicate a similar tool family. Shared terms: babel, core, lavamoat, lavamoat-core, lavamoat-tofu.

Same workflow

  • typewriterBoth packages work with overlapping file formats or content types. Shared terms: core, json, json-stable-stringify, sort, stable.
  • @datadog/mobile-react-native-babel-pluginLocal package facts share a topical domain. Shared terms: babel, core, types, utils.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Nucleus package database
  • cross-ecosystem install command graph
  • package relationship graph
  • package version freshness
  • package-page enrichment