Automic VaultAutomic Vault

npm / 排名 786

安装 lavamoat

查看 lavamoat 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

使用 Automic Vault 安装

Automic Vault
下载 AV
sudo av install npm:lavamoat

Portable and language managers

npmverified · 100%
npm install -g lavamoat

local npm package metadata

平台说明

  • 没有特定于此软件包的平台说明。

概览

软件包摘要

lavamoat is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".

命令和别名

  • lavamoat

安全态势

尚未找到受保护工具覆盖

没有找到 lavamoat 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。

Install behavior

  • No npm postinstall script is recorded in package metadata.
  • No Homebrew bottle metadata was recorded.
  • Installs with 11 runtime dependencies.

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
lavamoatcliglobal executable
lavamoat-run-commandcliglobal executable

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-06-10
管理器版本11.1.3
管理器更新时间2026-05-28
本地数据ok
上游not checked
检测到的最新版本not detected

https://github.com/LavaMoat/lavamoat

安装元数据

软件包元数据

Package keynpm:lavamoat
Version11.1.3
Package managernpm
Package manager pagehttps://www.npmjs.com/package/lavamoat
Homepagehttps://github.com/LavaMoat/lavamoat#readme
Repositoryhttps://github.com/LavaMoat/lavamoat
Upstream docshttps://github.com/LavaMoat/lavamoat#readme
LicenseMIT
Source archivehttps://registry.npmjs.org/lavamoat/-/lavamoat-11.1.3.tgz
Issue trackerhttps://github.com/LavaMoat/lavamoat/issues
Last updated2026-05-28T21:25:39.870Z
Published2026-05-28T21:25:39.870Z
Dependencies@babel/code-frame, @babel/highlight, @lavamoat/aa, bindings, corepack, htmlescape, lavamoat-core, lavamoat-tofu, node-gyp-build, resolve, yargs
Bottlenot recorded
npm postinstallnot defined
Servicenone declared

registry facts

Source database details

Source Databasenpm registry
Dist Tags
Latest
11.1.3
Version Count99
Maintainers
  • kumavis
  • naugtur
  • boneskull
Authorkumavis
PublisherGitHub Actions
Engines
Node
^20.19.0 || ^22.5.1 || ^24.0.0
Integritysha512-oemeR9jSZ96Avyg+5ina9qUr7M72IhHwGntTdr5S3AFA2fjQUJVgsgmheFMg+B2iwunBfSmQF4xeaymA3ItkMQ==
Shasuma1d08f61a4dfe8077d6987630fd36618bf1e6315
Unpacked Size82,976
File Count0
Created At2020-03-27T04:53:19.858Z
Latest Published At2026-05-28T21:25:39.870Z
Modified At2026-05-28T21:25:40.154Z

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

  • lavamoat-corePackage names and metadata indicate a similar tool family. Shared terms: babel, core, lavamoat, lavamoat-core, lavamoat-tofu.

相同工作流

  • @vercel/nftBoth packages touch the same language runtime or ecosystem. Shared terms: are, bindings, build, gyp, modules.
  • gitnexusBoth packages touch the same language runtime or ecosystem. Shared terms: build, code, core, graph, gyp.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Nucleus package database
  • cross-ecosystem install command graph
  • package relationship graph
  • package version freshness
  • package-page enrichment