In the Crest catalog
LavaMoat/LavaMoat
tools for sandboxing your dependency graph
- Stars
- 1.2K
- Forks
- 85
- Language
- JavaScript
- Last push
- 23d ago
- Last release
- 29d ago
Linked by the package’s own registry metadata.GitHub (opens in a new tab)
Package · npm
@lavamoat/allow-scripts
npm · v5.1.0 · MIT
A tool for running only the dependency lifecycle hooks specified in an allowlist.
Tentative categories were assigned with moderate confidence (0.5 to 0.75): they are shown, but they do not count toward a category’s momentum. How categories work
Install
npm install @lavamoat/allow-scriptsAdoption
- Downloads (30 days)
- 847.7K
- Observeddownloads / 30 days
- Popularity
- Lower half on npm
- Derived37th percentile within npm
- Dependents
- Collectinghistory
- Collecting
- Maintenance
- 0.61
- DerivedRelease cadence and recency, 0 to 1
- Releases per year
- 7.4
- 40 versions over its life
Growth by period
Derived by Crest of Tech from two observations of npm’s own figure, a period apart. Nothing is stored or estimated: without an observation near the period’s start, the period is still collecting.
- 7 days
- −11.5% · 7d
- Derived−110K downloads / 30 days, SEP 30 → OCT 7
- 30 days
- −14.4% · 30d
- Derived−143K downloads / 30 days, SEP 7 → OCT 7
- 90 days
- −7.7% · 90d
- Derived−70.4K downloads / 30 days, JUL 6 → OCT 7
- 1 year
- +65.7% · 1y
- Derived+336.2K downloads / 30 days, OCT 6 → OCT 7
Adoption history
Adoption historydownloads / 30 days · 76 observations
Table of observations (76)
| Day | downloads / 30 days | Dependents |
|---|---|---|
| OCT 7, 2026 | 847,696 | Not observed |
| OCT 6, 2026 | 847,696 | Not observed |
| OCT 5, 2026 | 865,270 | Not observed |
| OCT 4, 2026 | 880,870 | Not observed |
| OCT 3, 2026 | 921,592 | Not observed |
| OCT 2, 2026 | 907,700 | Not observed |
| OCT 1, 2026 | 946,509 | Not observed |
| SEP 30, 2026 | 957,701 | Not observed |
| SEP 29, 2026 | 960,595 | Not observed |
| SEP 28, 2026 | 924,612 | Not observed |
| SEP 27, 2026 | 897,077 | Not observed |
| SEP 26, 2026 | 934,145 | Not observed |
| SEP 25, 2026 | 977,918 | Not observed |
| SEP 24, 2026 | 999,812 | Not observed |
| SEP 23, 2026 | 1,019,667 | Not observed |
| SEP 22, 2026 | 1,021,962 | Not observed |
| SEP 21, 2026 | 994,448 | Not observed |
| SEP 20, 2026 | 971,207 | Not observed |
| SEP 19, 2026 | 988,224 | Not observed |
| SEP 18, 2026 | 1,015,135 | Not observed |
| SEP 17, 2026 | 1,009,069 | Not observed |
| SEP 16, 2026 | 1,005,554 | Not observed |
| SEP 15, 2026 | 992,599 | Not observed |
| SEP 14, 2026 | 1,006,730 | Not observed |
| SEP 13, 2026 | 980,718 | Not observed |
| SEP 12, 2026 | 962,231 | Not observed |
| SEP 11, 2026 | 989,785 | Not observed |
| SEP 10, 2026 | 989,891 | Not observed |
| SEP 9, 2026 | 994,891 | Not observed |
| SEP 8, 2026 | 980,208 | Not observed |
| SEP 7, 2026 | 990,675 | Not observed |
| SEP 6, 2026 | 1,004,254 | Not observed |
| SEP 5, 2026 | 1,032,695 | Not observed |
| SEP 4, 2026 | 1,057,349 | Not observed |
| SEP 3, 2026 | 1,056,578 | Not observed |
| SEP 2, 2026 | 1,107,032 | Not observed |
| SEP 1, 2026 | 1,077,346 | Not observed |
| AUG 31, 2026 | 1,033,960 | Not observed |
| AUG 30, 2026 | 999,352 | Not observed |
| AUG 29, 2026 | 1,033,078 | Not observed |
| AUG 28, 2026 | 1,069,399 | Not observed |
| AUG 27, 2026 | 1,075,168 | Not observed |
| AUG 26, 2026 | 1,070,505 | Not observed |
| AUG 25, 2026 | 1,050,162 | Not observed |
| AUG 24, 2026 | 1,000,470 | Not observed |
| AUG 23, 2026 | 966,136 | Not observed |
| AUG 22, 2026 | 998,189 | Not observed |
| AUG 21, 2026 | 1,038,408 | Not observed |
| AUG 20, 2026 | 1,057,347 | Not observed |
| AUG 19, 2026 | 1,068,084 | Not observed |
| AUG 18, 2026 | 1,072,642 | Not observed |
| AUG 17, 2026 | 1,036,563 | Not observed |
| AUG 16, 2026 | 1,011,529 | Not observed |
| AUG 15, 2026 | 1,031,705 | Not observed |
| AUG 14, 2026 | 1,070,934 | Not observed |
| AUG 13, 2026 | 1,120,037 | Not observed |
| AUG 12, 2026 | 1,125,013 | Not observed |
| AUG 11, 2026 | 1,127,153 | Not observed |
| AUG 10, 2026 | 1,077,755 | Not observed |
| AUG 9, 2026 | 1,046,988 | Not observed |
| AUG 8, 2026 | 1,077,326 | Not observed |
| AUG 7, 2026 | 1,109,681 | Not observed |
| AUG 6, 2026 | 1,109,928 | Not observed |
| AUG 5, 2026 | 1,110,568 | Not observed |
| AUG 4, 2026 | 1,101,051 | Not observed |
| AUG 3, 2026 | 1,058,425 | Not observed |
| AUG 2, 2026 | 1,027,892 | Not observed |
| AUG 1, 2026 | 1,047,086 | Not observed |
| JUL 31, 2026 | 1,075,575 | Not observed |
| JUL 30, 2026 | 1,077,614 | Not observed |
| JUL 29, 2026 | 1,069,126 | Not observed |
| JUL 28, 2026 | 1,054,952 | Not observed |
| JUL 27, 2026 | 1,010,062 | Not observed |
| JUL 26, 2026 | 977,814 | Not observed |
| JUL 20, 2026 | 966,435 | Not observed |
| JUL 13, 2026 | 931,836 | Not observed |
Facts from the registry
- Latest version
- v5.1.0
- 40 versions
- First published
- JAN 16, 2021
- Last release
- JUN 25, 2026
- 4mo ago
- Licence
- MIT
Repository
Dependencies latest version · v5.1.0
Runtime 6
- @lavamoat/aa
^5.0.1 - @npmcli/run-script
10.0.4 - bin-links
4.0.4 - npm-normalize-package-bin
3.0.1 - type-fest
4.41.0 - yargs
17.7.3
Related packages
- @lavamoat/git-safe-dependenciesOpinionated dependency linter for your git/github dependenciesPublished from the same repository
- @lavamoat/hardenA tool for providing reasonable defaults and security hardening to your projectPublished from the same repository
- lavamoat`lavamoat` is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".Published from the same repository
- lavamoat-browserifybrowserify plugin for sandboxing dependencies with LavaMoatPublished from the same repository
- lavamoat-coreLavaMoat kernel and utilsPublished from the same repository
- lavamoat-tofuThis is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable configPublished from the same repository
- microsandboxPython SDK for microsandbox — secure, fast microVM-based sandboxing.Same primary category
- gam7CLI tool to manage Google WorkspaceSame primary category
- matrix-synapseHomeserver for the Matrix decentralised comms protocolSame primary category
- scc-firewall-manager-sdkCisco Security Cloud Control Firewall Manager APISame primary category
- simplesamlphp/saml2SAML2 PHP library from SimpleSAMLphpSame primary category
- assemblylineAssemblyline 4 - Automated malware analysis frameworkSame primary category
Related news
No published news event mentions this package or its repository yet.