Automic VaultAutomic Vault

npm / rank 2

Install which with npm

Like which(1) unix command. Find the first instance of an executable in the PATH. Version 7.0.0 via npm; verified 2026-05-08.

Install commandSecurity notes

install

Additional install commands

Portable and language managers

npmverified · 100%
npm install -g which

local npm package metadata

overview

Package summary

Like which(1) unix command. Find the first instance of an executable in the PATH.

Commands and aliases

  • node-which

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for which. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No npm postinstall script is recorded in package metadata.
  • No Homebrew bottle metadata was recorded.
  • Installs with 1 runtime dependencies.
  • Build metadata lists 3 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
node-whichcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version7.0.0
manager updated2026-05-08
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/npm/node-which

install metadata

Package metadata

Package keynpm:which
Version7.0.0
Package managernpm
Package manager pagehttps://www.npmjs.com/package/which
Homepagehttps://github.com/npm/node-which#readme
Repositoryhttps://github.com/npm/node-which
Upstream docshttps://github.com/npm/node-which#readme
LicenseISC
Source archivehttps://registry.npmjs.org/which/-/which-7.0.0.tgz
Issue trackerhttps://github.com/npm/node-which/issues
Last updated2026-05-08T18:30:58.733Z
Published2026-05-08T18:30:58.733Z
Pulseupdated
Dependenciesisexe
Build dependencies@npmcli/eslint-config, @npmcli/template-oss, tap
Bottlenot recorded
npm postinstallnot defined
Servicenone declared

registry facts

Source database details

Source Databasenpm registry
Dist Tags
Latest
7.0.0
Version Count37
Maintainers
  • saquibkhan
  • npm-cli-ops
  • reggi
  • owlstronaut
AuthorGitHub Inc.
PublisherGitHub Actions
Engines
Node
^22.22.2 || ^24.15.0 || >=26.0.0
Integritysha512-RancgH2dmbLdHl6LRhEqvklWMgl/Hdnun0Y90KhBOLkMefg8Qa7/Zel8Sm+8HEcP6DEjzsWzpkuBQEZok58isA==
Shasumcdfdd7bfc31c5af050b97bc7c02b1844731fb8b2
Unpacked Size7,487
File Count0
Created At2011-08-07T18:36:12.410Z
Latest Published At2026-05-08T18:30:58.733Z
Modified At2026-05-08T18:30:59.133Z

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

which

nix profile install nixpkgs#which
  • normalized package name match
  • Matched by: Which
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/wh/which/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

which 2.23-r0

A utility to show the full path of commands

https://savannah.gnu.org/projects/which

sudo apk add which
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: which
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Which
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: which from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

which-doc 2.23-r0

A utility to show the full path of commands (documentation)

https://savannah.gnu.org/projects/which

sudo apk add which-doc
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: which
  • normalized package name match
  • Matched by: Which
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: which-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
dnf95%

which 2.25-1.fc45

Displays where a particular program in your path is located

https://savannah.gnu.org/projects/which/

sudo dnf install which
  • License: GPL-3.0-only
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: which
  • 3 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Which
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: which from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

which 2.25-1

A utility to show the full path of commands

https://savannah.gnu.org/projects/which/

sudo pacman -S which
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • 2 dependencies
  • normalized package name match
  • Matched by: Which
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: which from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz
zypper95%

which 2.25-1.1

Displays where a particular program in your path is located

https://savannah.gnu.org/projects/which/

sudo zypper install which
  • License: GPL-3.0-or-later
  • Category: System/Base
  • Architecture: x86_64
  • Source Package: which
  • 1 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Which
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: which from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
Chocolatey95%

which

choco install which
  • normalized package name match
  • Matched by: Which
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: which from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','webex-meetings'
Scoop95%

main/which

scoop install main/which
  • normalized package name match
  • Matched by: Which
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/which.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

GnuWin32.Which

winget install --id GnuWin32.Which -e
  • normalized package name match
  • Matched by: Which
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: GnuWin32.Which from https://cdn.winget.microsoft.com/cache/source.msix
Debian apt92%

node-which 2.0.2+~cs1.3.2-3

Cross-platform 'which' module for Node.js

https://github.com/isaacs/node-which

sudo apt install node-which
  • Section: javascript
  • Architecture: all
  • 2 dependencies
  • 1 provides
  • installed executable or alias match
  • Matched by: Node Which
Debian stable package indexes · deb.debian.org · Debian stable package indexes: node-which from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt92%

node-which 2.0.2+~cs1.3.2-3

Cross-platform 'which' module for Node.js

https://github.com/isaacs/node-which

sudo apt install node-which
  • Section: universe/web
  • Architecture: all
  • 2 dependencies
  • 1 provides
  • installed executable or alias match
  • Matched by: Node Which
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: node-which from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Same workflow

  • elm-reviewBoth packages touch the same language runtime or ecosystem. Shared terms: find, node, path, which.
  • npm-runBoth packages touch the same language runtime or ecosystem. Shared terms: executable, node, path, which.
  • npm-whichBoth packages touch the same language runtime or ecosystem. Shared terms: executable, node, path, which.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Nucleus package database
  • cross-ecosystem install command graph
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment