In the Crest catalog
LavaMoat/LavaMoat
tools for sandboxing your dependency graph
- Stars
- 1.2K
- Forks
- 85
- Language
- JavaScript
- Last push
- 23d ago
- Last release
- 29d ago
Linked by the package’s own registry metadata.GitHub (opens in a new tab)
Package · npm
@lavamoat/harden
npm · v0.8.0 · MIT
A tool for providing reasonable defaults and security hardening to your project
Install
npm install @lavamoat/hardenAdoption
- Downloads (30 days)
- 3.4K
- Observeddownloads / 30 days
- Popularity
- Lower half on npm
- Derived7th percentile within npm
- Dependents
- Collectinghistory
- Collecting
- Maintenance
- 0.96
- DerivedRelease cadence and recency, 0 to 1
- Releases per year
- 38
- 11 versions over its life
Growth by period
Derived by Crest of Tech from two observations of npm’s own figure, a period apart. Nothing is stored or estimated: without an observation near the period’s start, the period is still collecting.
- 7 days
- +8.1% · 7d
- Derived+258 downloads / 30 days, SEP 30 → OCT 7
- 30 days
- +662.2% · 30d
- Derived+3K downloads / 30 days, SEP 7 → OCT 7
- 90 days
- +284.5% · 90d
- Derived+2.5K downloads / 30 days, JUL 6 → OCT 7
- 1 year
- +3.4K · 1y
- Derived+3.4K downloads / 30 days, OCT 6 → OCT 7
Adoption history
Adoption historydownloads / 30 days · 115 observations
Table of observations (115)
| Day | downloads / 30 days | Dependents |
|---|---|---|
| OCT 7, 2026 | 3,445 | Not observed |
| OCT 6, 2026 | 3,445 | Not observed |
| OCT 5, 2026 | 3,456 | Not observed |
| OCT 4, 2026 | 3,313 | Not observed |
| OCT 3, 2026 | 3,424 | Not observed |
| OCT 2, 2026 | 3,413 | Not observed |
| OCT 1, 2026 | 3,337 | Not observed |
| SEP 30, 2026 | 3,187 | Not observed |
| SEP 29, 2026 | 2,987 | Not observed |
| SEP 28, 2026 | 2,861 | Not observed |
| SEP 27, 2026 | 2,696 | Not observed |
| SEP 26, 2026 | 2,688 | Not observed |
| SEP 25, 2026 | 2,675 | Not observed |
| SEP 24, 2026 | 2,451 | Not observed |
| SEP 23, 2026 | 2,230 | Not observed |
| SEP 22, 2026 | 1,950 | Not observed |
| SEP 21, 2026 | 1,734 | Not observed |
| SEP 20, 2026 | 1,451 | Not observed |
| SEP 19, 2026 | 1,255 | Not observed |
| SEP 18, 2026 | 1,218 | Not observed |
| SEP 17, 2026 | 1,135 | Not observed |
| SEP 16, 2026 | 1,050 | Not observed |
| SEP 15, 2026 | 878 | Not observed |
| SEP 14, 2026 | 880 | Not observed |
| SEP 13, 2026 | 755 | Not observed |
| SEP 12, 2026 | 706 | Not observed |
| SEP 11, 2026 | 673 | Not observed |
| SEP 10, 2026 | 529 | Not observed |
| SEP 9, 2026 | 460 | Not observed |
| SEP 8, 2026 | 434 | Not observed |
| SEP 7, 2026 | 452 | Not observed |
| SEP 6, 2026 | 467 | Not observed |
| SEP 5, 2026 | 474 | Not observed |
| SEP 4, 2026 | 469 | Not observed |
| SEP 3, 2026 | 474 | Not observed |
| SEP 2, 2026 | 477 | Not observed |
| SEP 1, 2026 | 471 | Not observed |
| AUG 31, 2026 | 462 | Not observed |
| AUG 30, 2026 | 463 | Not observed |
| AUG 29, 2026 | 458 | Not observed |
| AUG 28, 2026 | 459 | Not observed |
| AUG 27, 2026 | 424 | Not observed |
| AUG 26, 2026 | 407 | Not observed |
| AUG 25, 2026 | 399 | Not observed |
| AUG 24, 2026 | 388 | Not observed |
| AUG 23, 2026 | 389 | Not observed |
| AUG 22, 2026 | 387 | Not observed |
| AUG 21, 2026 | 382 | Not observed |
| AUG 20, 2026 | 376 | Not observed |
| AUG 19, 2026 | 378 | Not observed |
| AUG 18, 2026 | 374 | Not observed |
| AUG 17, 2026 | 374 | Not observed |
| AUG 16, 2026 | 386 | Not observed |
| AUG 15, 2026 | 399 | Not observed |
| AUG 14, 2026 | 545 | Not observed |
| AUG 13, 2026 | 685 | Not observed |
| AUG 12, 2026 | 684 | Not observed |
| AUG 11, 2026 | 687 | Not observed |
| AUG 10, 2026 | 671 | Not observed |
| AUG 9, 2026 | 665 | Not observed |
| AUG 8, 2026 | 656 | Not observed |
| AUG 7, 2026 | 648 | Not observed |
| AUG 6, 2026 | 644 | Not observed |
| AUG 5, 2026 | 633 | Not observed |
| AUG 4, 2026 | 488 | Not observed |
| AUG 3, 2026 | 485 | Not observed |
| AUG 2, 2026 | 485 | Not observed |
| AUG 1, 2026 | 493 | Not observed |
| JUL 31, 2026 | 494 | Not observed |
| JUL 30, 2026 | 498 | Not observed |
| JUL 29, 2026 | 495 | Not observed |
| JUL 28, 2026 | 491 | Not observed |
| JUL 27, 2026 | 493 | Not observed |
| JUL 26, 2026 | 491 | Not observed |
| JUL 20, 2026 | 485 | Not observed |
| JUL 13, 2026 | 722 | Not observed |
| JUL 6, 2026 | 896 | Not observed |
| JUN 29, 2026 | 864 | Not observed |
| JUN 22, 2026 | 836 | Not observed |
| JUN 15, 2026 | 244 | Not observed |
| JUN 8, 2026 | 0 | Not observed |
| JUN 1, 2026 | 0 | Not observed |
| MAY 25, 2026 | 0 | Not observed |
| MAY 18, 2026 | 0 | Not observed |
| MAY 11, 2026 | 0 | Not observed |
| MAY 4, 2026 | 0 | Not observed |
| APR 27, 2026 | 0 | Not observed |
| APR 20, 2026 | 0 | Not observed |
| APR 13, 2026 | 0 | Not observed |
| APR 6, 2026 | 0 | Not observed |
| MAR 30, 2026 | 0 | Not observed |
| MAR 23, 2026 | 0 | Not observed |
| MAR 16, 2026 | 0 | Not observed |
| MAR 9, 2026 | 0 | Not observed |
| MAR 2, 2026 | 0 | Not observed |
| FEB 23, 2026 | 0 | Not observed |
| FEB 16, 2026 | 0 | Not observed |
| FEB 9, 2026 | 0 | Not observed |
| FEB 2, 2026 | 0 | Not observed |
| JAN 26, 2026 | 0 | Not observed |
| JAN 19, 2026 | 0 | Not observed |
| JAN 12, 2026 | 0 | Not observed |
| JAN 5, 2026 | 0 | Not observed |
| DEC 29, 2025 | 0 | Not observed |
| DEC 22, 2025 | 0 | Not observed |
| DEC 15, 2025 | 0 | Not observed |
| DEC 8, 2025 | 0 | Not observed |
| DEC 1, 2025 | 0 | Not observed |
| NOV 24, 2025 | 0 | Not observed |
| NOV 17, 2025 | 0 | Not observed |
| NOV 10, 2025 | 0 | Not observed |
| NOV 3, 2025 | 0 | Not observed |
| OCT 27, 2025 | 0 | Not observed |
| OCT 20, 2025 | 0 | Not observed |
| OCT 13, 2025 | 0 | Not observed |
Facts from the registry
- Latest version
- v0.8.0
- 11 versions
- First published
- JUN 12, 2026
- Last release
- SEP 25, 2026
- 29d ago
- Licence
- MIT
Repository
Dependencies latest version · v0.8.0
Runtime 6
- @yarnpkg/core
4.8.0 - @yarnpkg/fslib
3.1.5 - consola
3.4.2 - semver
^7.7.2 - type-fest
4.41.0 - yaml
^2.9.0
Related packages
- @lavamoat/allow-scriptsA tool for running only the dependency lifecycle hooks specified in an allowlist.Published from the same repository
- @lavamoat/git-safe-dependenciesOpinionated dependency linter for your git/github dependenciesPublished from the same repository
- lavamoat`lavamoat` is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".Published from the same repository
- lavamoat-browserifybrowserify plugin for sandboxing dependencies with LavaMoatPublished from the same repository
- lavamoat-coreLavaMoat kernel and utilsPublished from the same repository
- lavamoat-tofuThis is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable configPublished from the same repository
- microsandboxPython SDK for microsandbox — secure, fast microVM-based sandboxing.Same primary category
- gam7CLI tool to manage Google WorkspaceSame primary category
- matrix-synapseHomeserver for the Matrix decentralised comms protocolSame primary category
- scc-firewall-manager-sdkCisco Security Cloud Control Firewall Manager APISame primary category
- simplesamlphp/saml2SAML2 PHP library from SimpleSAMLphpSame primary category
- assemblylineAssemblyline 4 - Automated malware analysis frameworkSame primary category
Related news
No published news event mentions this package or its repository yet.