Automic VaultAutomic Vault

npm / rank 366

Install only-allow with npm

Force a specific package manager to be used on a project. Version 1.2.2 via npm; verified 2025-11-28.

Install commandSecurity notes

install

Additional install commands

Portable and language managers

npmverified ยท 100%
npm install -g only-allow

local npm package metadata

overview

Package summary

Force a specific package manager to be used on a project

Commands and aliases

  • only-allow

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for only-allow. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No npm postinstall script is recorded in package metadata.
  • No Homebrew bottle metadata was recorded.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
only-allowcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.2.2
manager updated2025-11-28
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/pnpm/only-allow

  • noticeThe package-manager record has not changed recently.2025-11-28T14:34:24.293Zhigh confidence
  • infoNo cached GitHub release or tag data was available.https://github.com/pnpm/only-allownone confidence

install metadata

Package metadata

Package keynpm:only-allow
Version1.2.2
Package managernpm
Package manager pagehttps://www.npmjs.com/package/only-allow
Homepagehttps://github.com/pnpm/only-allow#readme
Repositoryhttps://github.com/pnpm/only-allow
Upstream docshttps://github.com/pnpm/only-allow#readme
LicenseMIT
Source archivehttps://registry.npmjs.org/only-allow/-/only-allow-1.2.2.tgz
Issue trackerhttps://github.com/pnpm/only-allow/issues
Last updated2025-11-28T14:34:24.293Z
Published2025-11-28T14:34:24.293Z
Dependencieswhich-pm-runs
Bottlenot recorded
npm postinstallnot defined
Servicenone declared
Keywordspnpm, cnpm, npm, yarn, bun

registry facts

Source database details

Source Databasenpm registry
Dist Tags
Latest
1.2.2
Version Count7
Maintainers
  • zkochan
AuthorZoltan Kochan
Publisherzkochan
Integritysha512-uxyNYDsCh5YIJ780G7hC5OHjVUr9reHsbZNMM80L9tZlTpb3hUzb36KXgW4ZUGtJKQnGA3xegmWg1BxhWV0jJA==
Shasumc1aaa8df1c657f8b09e3a42f8c024af10fea3b7b
Unpacked Size4,770
File Count0
Created At2020-05-01T11:16:35.359Z
Latest Published At2025-11-28T14:34:24.293Z
Modified At2025-11-28T14:34:24.471Z

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Same workflow

  • git-pull-runLocal package facts share a topical domain. Shared terms: bun, manager, npm, pnpm, yarn.
  • niLocal package facts share a topical domain. Shared terms: bun, manager, npm, pnpm, yarn.
  • only-switchLocal package facts share a topical domain. Shared terms: only.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Nucleus package database
  • cross-ecosystem install command graph
  • package relationship graph
  • package version freshness
  • package-page enrichment