In the Crest catalog
LavaMoat/LavaMoat
tools for sandboxing your dependency graph
- Stars
- 1.2K
- Forks
- 85
- Language
- JavaScript
- Last push
- 23d ago
- Last release
- 29d ago
Linked by the package’s own registry metadata.GitHub (opens in a new tab)
Package · npm
lavamoat
npm · v11.1.6 · MIT
`lavamoat` is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".
Tentative categories were assigned with moderate confidence (0.5 to 0.75): they are shown, but they do not count toward a category’s momentum. How categories work
Install
npm install lavamoatAdoption
- Downloads (30 days)
- 71.1K
- Observeddownloads / 30 days
- Popularity
- Lower half on npm
- Derived23rd percentile within npm
- Dependents
- Collectinghistory
- Collecting
- Maintenance
- 0.94
- DerivedRelease cadence and recency, 0 to 1
- Releases per year
- 16
- 102 versions over its life
Growth by period
Derived by Crest of Tech from two observations of npm’s own figure, a period apart. Nothing is stored or estimated: without an observation near the period’s start, the period is still collecting.
- 7 days
- +6.1% · 7d
- Derived+4.1K downloads / 30 days, SEP 30 → OCT 7
- 30 days
- −11.9% · 30d
- Derived−9.6K downloads / 30 days, SEP 7 → OCT 7
- 90 days
- −1.3% · 90d
- Derived−912 downloads / 30 days, JUL 6 → OCT 7
- 1 year
- −40.9% · 1y
- Derived−49.2K downloads / 30 days, NOV 10 → OCT 7
Adoption history
Adoption historydownloads / 30 days · 31 observations
Table of observations (31)
| Day | downloads / 30 days | Dependents |
|---|---|---|
| OCT 7, 2026 | 71,076 | Not observed |
| OCT 6, 2026 | 69,179 | Not observed |
| OCT 5, 2026 | 71,089 | Not observed |
| OCT 4, 2026 | 71,076 | Not observed |
| OCT 3, 2026 | 72,434 | Not observed |
| OCT 2, 2026 | 69,080 | Not observed |
| OCT 1, 2026 | 67,804 | Not observed |
| SEP 30, 2026 | 66,968 | Not observed |
| SEP 29, 2026 | 66,305 | Not observed |
| SEP 28, 2026 | 64,753 | Not observed |
| SEP 27, 2026 | 64,129 | Not observed |
| SEP 26, 2026 | 65,785 | Not observed |
| SEP 25, 2026 | 66,901 | Not observed |
| SEP 24, 2026 | 69,189 | Not observed |
| SEP 23, 2026 | 70,049 | Not observed |
| SEP 22, 2026 | 71,140 | Not observed |
| SEP 21, 2026 | 71,795 | Not observed |
| SEP 20, 2026 | 73,374 | Not observed |
| SEP 19, 2026 | 75,185 | Not observed |
| SEP 18, 2026 | 77,204 | Not observed |
| SEP 17, 2026 | 76,069 | Not observed |
| SEP 16, 2026 | 75,989 | Not observed |
| SEP 15, 2026 | 75,647 | Not observed |
| SEP 14, 2026 | 78,769 | Not observed |
| SEP 13, 2026 | 79,349 | Not observed |
| SEP 12, 2026 | 73,257 | Not observed |
| SEP 11, 2026 | 74,880 | Not observed |
| SEP 10, 2026 | 75,911 | Not observed |
| SEP 9, 2026 | 77,553 | Not observed |
| SEP 8, 2026 | 78,232 | Not observed |
| SEP 7, 2026 | 80,712 | Not observed |
Facts from the registry
- Latest version
- v11.1.6
- 102 versions
- First published
- MAR 27, 2020
- Last release
- SEP 25, 2026
- 29d ago
- Licence
- MIT
Repository
Dependencies latest version · v11.1.6
Runtime 10
- @babel/code-frame
7.29.7 - @babel/highlight
7.25.9 - @lavamoat/aa
^5.0.1 - bindings
1.5.0 - htmlescape
1.1.1 - lavamoat-core
^19.0.0 - lavamoat-tofu
^9.0.4 - node-gyp-build
4.8.4 - resolve
1.22.12 - yargs
17.7.3
Related packages
- @lavamoat/allow-scriptsA tool for running only the dependency lifecycle hooks specified in an allowlist.Published from the same repository
- @lavamoat/git-safe-dependenciesOpinionated dependency linter for your git/github dependenciesPublished from the same repository
- @lavamoat/hardenA tool for providing reasonable defaults and security hardening to your projectPublished from the same repository
- lavamoat-browserifybrowserify plugin for sandboxing dependencies with LavaMoatPublished from the same repository
- lavamoat-coreLavaMoat kernel and utilsPublished from the same repository
- lavamoat-tofuThis is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable configPublished from the same repository
- microsandboxPython SDK for microsandbox — secure, fast microVM-based sandboxing.Same primary category
- gam7CLI tool to manage Google WorkspaceSame primary category
- matrix-synapseHomeserver for the Matrix decentralised comms protocolSame primary category
- scc-firewall-manager-sdkCisco Security Cloud Control Firewall Manager APISame primary category
- simplesamlphp/saml2SAML2 PHP library from SimpleSAMLphpSame primary category
- assemblylineAssemblyline 4 - Automated malware analysis frameworkSame primary category
Related news
No published news event mentions this package or its repository yet.