In the Crest catalog
LavaMoat/LavaMoat
tools for sandboxing your dependency graph
- Stars
- 1.2K
- Forks
- 85
- Language
- JavaScript
- Last push
- 23d ago
- Last release
- 29d ago
Linked by the package’s own registry metadata.GitHub (opens in a new tab)
Package · npm
lavamoat-tofu
npm · v9.0.4 · MIT
This is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable config
Tentative categories were assigned with moderate confidence (0.5 to 0.75): they are shown, but they do not count toward a category’s momentum. How categories work
Install
npm install lavamoat-tofuAdoption
- Downloads (30 days)
- 144.9K
- Observeddownloads / 30 days
- Popularity
- Lower half on npm
- Derived27th percentile within npm
- Dependents
- Collectinghistory
- Collecting
- Maintenance
- 0.84
- DerivedRelease cadence and recency, 0 to 1
- Releases per year
- 6.9
- 45 versions over its life
Growth by period
Derived by Crest of Tech from two observations of npm’s own figure, a period apart. Nothing is stored or estimated: without an observation near the period’s start, the period is still collecting.
- 7 days
- +6.3% · 7d
- Derived+8.6K downloads / 30 days, SEP 30 → OCT 7
- 30 days
- −12.1% · 30d
- Derived−20K downloads / 30 days, SEP 7 → OCT 7
- 90 days
- −19.9% · 90d
- Derived−36.1K downloads / 30 days, JUL 6 → OCT 7
- 1 year
- −32.7% · 1y
- Derived−70.5K downloads / 30 days, NOV 10 → OCT 7
Adoption history
Adoption historydownloads / 30 days · 111 observations
Table of observations (116)
| Day | downloads / 30 days | Dependents |
|---|---|---|
| OCT 7, 2026 | 144,852 | Not observed |
| OCT 6, 2026 | 142,773 | Not observed |
| OCT 5, 2026 | 146,416 | Not observed |
| OCT 4, 2026 | 144,852 | Not observed |
| OCT 3, 2026 | 146,763 | Not observed |
| OCT 2, 2026 | 140,319 | Not observed |
| OCT 1, 2026 | 137,697 | Not observed |
| SEP 30, 2026 | 136,217 | Not observed |
| SEP 29, 2026 | 134,621 | Not observed |
| SEP 28, 2026 | 132,474 | Not observed |
| SEP 27, 2026 | 131,091 | Not observed |
| SEP 26, 2026 | 133,740 | Not observed |
| SEP 25, 2026 | 135,438 | Not observed |
| SEP 24, 2026 | 139,357 | Not observed |
| SEP 23, 2026 | 140,895 | Not observed |
| SEP 22, 2026 | 143,979 | Not observed |
| SEP 21, 2026 | 146,424 | Not observed |
| SEP 20, 2026 | 150,072 | Not observed |
| SEP 19, 2026 | 153,748 | Not observed |
| SEP 18, 2026 | 157,898 | Not observed |
| SEP 17, 2026 | 155,852 | Not observed |
| SEP 16, 2026 | 155,316 | Not observed |
| SEP 15, 2026 | 154,646 | Not observed |
| SEP 14, 2026 | 160,836 | Not observed |
| SEP 13, 2026 | 161,964 | Not observed |
| SEP 12, 2026 | 150,972 | Not observed |
| SEP 11, 2026 | 154,000 | Not observed |
| SEP 10, 2026 | 155,830 | Not observed |
| SEP 9, 2026 | 158,996 | Not observed |
| SEP 8, 2026 | 159,956 | Not observed |
| SEP 7, 2026 | 164,884 | Not observed |
| SEP 6, 2026 | 170,246 | Not observed |
| SEP 5, 2026 | 173,234 | Not observed |
| SEP 4, 2026 | 173,223 | Not observed |
| SEP 3, 2026 | 173,106 | Not observed |
| SEP 2, 2026 | 179,610 | Not observed |
| SEP 1, 2026 | 178,927 | Not observed |
| AUG 31, 2026 | 176,519 | Not observed |
| AUG 30, 2026 | 178,553 | Not observed |
| AUG 29, 2026 | 178,231 | Not observed |
| AUG 28, 2026 | 180,825 | Not observed |
| AUG 27, 2026 | 181,361 | Not observed |
| AUG 26, 2026 | 182,638 | Not observed |
| AUG 25, 2026 | 179,292 | Not observed |
| AUG 24, 2026 | 176,351 | Not observed |
| AUG 23, 2026 | 172,496 | Not observed |
| AUG 22, 2026 | 172,459 | Not observed |
| AUG 21, 2026 | 171,426 | Not observed |
| AUG 20, 2026 | 171,819 | Not observed |
| AUG 19, 2026 | 169,191 | Not observed |
| AUG 18, 2026 | 172,433 | Not observed |
| AUG 17, 2026 | 173,098 | Not observed |
| AUG 16, 2026 | 174,363 | Not observed |
| AUG 15, 2026 | 176,469 | Not observed |
| AUG 14, 2026 | 180,224 | Not observed |
| AUG 13, 2026 | 189,051 | Not observed |
| AUG 12, 2026 | 192,721 | Not observed |
| AUG 11, 2026 | 195,534 | Not observed |
| AUG 10, 2026 | 187,866 | Not observed |
| AUG 9, 2026 | 188,043 | Not observed |
| AUG 8, 2026 | 191,606 | Not observed |
| AUG 7, 2026 | 194,384 | Not observed |
| AUG 6, 2026 | 196,497 | Not observed |
| AUG 5, 2026 | 199,578 | Not observed |
| AUG 4, 2026 | 200,664 | Not observed |
| AUG 3, 2026 | 198,605 | Not observed |
| AUG 2, 2026 | 197,938 | Not observed |
| AUG 1, 2026 | 201,103 | Not observed |
| JUL 31, 2026 | 202,576 | Not observed |
| JUL 30, 2026 | 205,157 | Not observed |
| JUL 29, 2026 | 207,777 | Not observed |
| JUL 28, 2026 | 208,749 | Not observed |
| JUL 27, 2026 | 207,005 | Not observed |
| JUL 26, 2026 | 206,625 | Not observed |
| JUL 20, 2026 | 211,943 | Not observed |
| JUL 13, 2026 | 185,485 | Not observed |
| JUL 6, 2026 | 180,914 | Not observed |
| JUN 29, 2026 | 167,602 | Not observed |
| JUN 22, 2026 | 157,818 | Not observed |
| JUN 15, 2026 | 158,306 | Not observed |
| JUN 8, 2026 | 166,868 | Not observed |
| JUN 1, 2026 | 167,578 | Not observed |
| MAY 25, 2026 | 159,882 | Not observed |
| MAY 18, 2026 | 156,965 | Not observed |
| MAY 11, 2026 | 157,616 | Not observed |
| MAY 4, 2026 | 187,889 | Not observed |
| APR 27, 2026 | 220,487 | Not observed |
| APR 20, 2026 | 263,878 | Not observed |
| APR 13, 2026 | 269,571 | Not observed |
| APR 6, 2026 | 281,342 | Not observed |
| MAR 30, 2026 | 304,844 | Not observed |
| MAR 23, 2026 | 301,391 | Not observed |
| MAR 16, 2026 | 301,070 | Not observed |
| MAR 9, 2026 | 295,449 | Not observed |
| MAR 2, 2026 | 277,326 | Not observed |
| FEB 23, 2026 | 268,895 | Not observed |
| FEB 16, 2026 | 273,760 | Not observed |
| FEB 9, 2026 | 270,921 | Not observed |
| FEB 2, 2026 | 263,924 | Not observed |
| JAN 26, 2026 | 221,833 | Not observed |
| JAN 19, 2026 | 178,358 | Not observed |
| JAN 12, 2026 | 176,136 | Not observed |
| JAN 5, 2026 | 186,388 | Not observed |
| DEC 29, 2025 | 230,428 | Not observed |
| DEC 22, 2025 | 276,753 | Not observed |
| DEC 15, 2025 | 283,699 | Not observed |
| DEC 8, 2025 | 273,678 | Not observed |
| DEC 1, 2025 | 265,532 | Not observed |
| NOV 24, 2025 | 258,647 | Not observed |
| NOV 17, 2025 | 240,602 | Not observed |
| NOV 10, 2025 | 215,303 | Not observed |
| NOV 3, 2025 | Not observed | Not observed |
| OCT 27, 2025 | Not observed | Not observed |
| OCT 20, 2025 | Not observed | Not observed |
| OCT 13, 2025 | Not observed | Not observed |
| OCT 7, 2025 | Not observed | Not observed |
Facts from the registry
- Latest version
- v9.0.4
- 45 versions
- First published
- MAR 25, 2020
- Last release
- SEP 25, 2026
- 29d ago
- Licence
- MIT
Repository
Dependencies latest version · v9.0.4
Runtime 6
- @babel/parser
7.29.7 - @babel/traverse
7.29.7 - @babel/types
7.29.7 - @lavamoat/types
^2.0.0 - @types/babel__traverse
7.28.0 - type-fest
4.41.0
Peer 1
- lavamoat-core
>15.4.0
Related packages
- @lavamoat/allow-scriptsA tool for running only the dependency lifecycle hooks specified in an allowlist.Published from the same repository
- @lavamoat/git-safe-dependenciesOpinionated dependency linter for your git/github dependenciesPublished from the same repository
- @lavamoat/hardenA tool for providing reasonable defaults and security hardening to your projectPublished from the same repository
- lavamoat`lavamoat` is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".Published from the same repository
- lavamoat-browserifybrowserify plugin for sandboxing dependencies with LavaMoatPublished from the same repository
- lavamoat-coreLavaMoat kernel and utilsPublished from the same repository
- tombi🦅 TOML Toolkit 🦅Same primary category
- onepipeline-cliExecute a task DAG over oneagentgraph and onevcs, merging their event streams into one.Same primary category
- openrewriteOpenRewrite automated refactoring for Python.Same primary category
- pyscnAn intelligent Python code quality analyzer with architectural guidanceSame primary category
- sase-core-rsRust core for the sase TUI/CLI: PyO3 bindings exposing the Patch parser, query language, agent-artifact scan, status state machine, and git-query parsers.Same primary category
- pipmasterA versatile Python package manager utility for simplifying package installation, updates, checks, and environment management.Same primary category
Related news
No published news event mentions this package or its repository yet.