Automic VaultAutomic Vault

npm / rank 1194

Install momentic with npm

[![npm]](. Version 2.139.0 via npm; verified 2026-06-20.

Install commandSecurity notes

install

Additional install commands

Portable and language managers

npmverified ยท 100%
npm install -g momentic

local npm package metadata

overview

Package summary

[![npm]](

Commands and aliases

  • momentic

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for momentic. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No npm postinstall script is recorded in package metadata.
  • No Homebrew bottle metadata was recorded.
  • Installs with 85 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
momenticcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version2.139.0
manager updated2026-06-20
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/momentic-ai/cli

install metadata

Package metadata

Package keynpm:momentic
Version2.139.0
Package managernpm
Package manager pagehttps://www.npmjs.com/package/momentic
Homepagehttps://github.com/momentic-ai/cli
Repositoryhttps://github.com/momentic-ai/cli
Upstream docshttps://github.com/momentic-ai/cli
Source archivehttps://registry.npmjs.org/momentic/-/momentic-2.139.0.tgz
Issue trackerhttps://github.com/momentic-ai/cli/issues
Last updated2026-06-20T02:37:58.526Z
Published2026-06-15T18:53:49.154Z
Pulseupdated
Dependencies@actions/exec, @actions/io, @ai-sdk/anthropic, @ai-sdk/provider, @antfu/install-pkg, @commander-js/extra-typings, @dotenvx/dotenvx, @exodus/schemasafe, @faker-js/faker, @inquirer/prompts, @modelcontextprotocol/sdk, @octokit/auth-app, @octokit/rest, @openai/agents, @openai/agents-extensions, @opentelemetry/api, @opentelemetry/context-async-hooks, @opentelemetry/exporter-metrics-otlp-http, @opentelemetry/exporter-trace-otlp-http, @opentelemetry/resources, @opentelemetry/sdk-metrics, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node, @opentelemetry/semantic-conventions, @sentry/node, @vscode/ripgrep, adm-zip, ai, aria-query, axios, blocked-at, body-parser, boxen, chalk, commander, cors, cron-validator, csv-parser, date-fns, dedent, deep-object-diff, express, fast-json-patch, fetch-cookie, fetch-retry, fuse.js, image-size, jimp, jpeg-js, js-beautify, junit-report-builder, lodash-es, mime, moment, nodejs-file-downloader, open, otpauth, pg, picomatch, pino, pino-pretty, pino-std-serializers, pixelmatch, playwright, playwright-core, posthog-node, proper-lockfile, quote, safe-stable-stringify, semver, set-cookie-parser, simple-git, socket.io, string-argv, string-width, tinyglobby, tough-cookie, truncate-json, uuid, wait-on, why-is-node-running, wrap-ansi, ws, yaml, zod
Bottlenot recorded
npm postinstallnot defined
Servicenone declared

registry facts

Source database details

Source Databasenpm registry
Dist Tags
Alpha
2.0.1-alpha.1
Latest
2.139.0
Next
0.0.17-rc.5
Version Count655
Maintainers
  • wuweiweiwu
PublisherGitHub Actions
Engines
Node
>=20
Integritysha512-zIx/0jc2Va1RGTyUSKTd+oUZPRkoCXSNYdNaXWmIYdyNoehJQImGJfjxs/J+hr4Jvguxtw+6NKuiHOl1ObeZgw==
Shasum585425c9558715c951720bb66b867045da3599be
Unpacked Size10,353,248
File Count0
Created At2023-12-29T02:03:13.955Z
Latest Published At2026-06-15T18:53:49.154Z
Modified At2026-06-15T18:53:49.274Z

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Same workflow

  • axiomBoth packages touch the same language runtime or ecosystem. Shared terms: api, async, commander, context, context-async-hooks.
  • langwatchLocal package facts share a topical domain. Shared terms: api, base, commander, conventions, exporter.
  • trigger.devBoth packages touch the same language runtime or ecosystem. Shared terms: api, commander, conventions, exporter, exporter-trace-otlp-http.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Nucleus package database
  • cross-ecosystem install command graph
  • package relationship graph
  • package version freshness
  • package-page enrichment