❤
npm
Sign UpSign In

Search results

44 packages found

Sort by: Default
  • Default
  • Most downloaded this week
  • Most downloaded this month
  • Most dependents
  • Recently published

lavamoat

exact match

`lavamoat` is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".

lmbot
published version 9.0.8, 22 days ago0 dependents licensed under $MIT
10,495

lavamoat-core

LavaMoat kernel and utils

lmbot
published version 16.3.2, 22 days ago8 dependents licensed under $MIT
21,632

@lavamoat/lavapack

LavaMoat packer

lmbot
published version 7.0.8, 22 days ago2 dependents licensed under $MIT
10,434

lavamoat-browserify

browserify plugin for sandboxing dependencies with LavaMoat

lmbot
published version 18.1.5, 22 days ago1 dependents licensed under $MIT
10,441

lavamoat-tofu

This is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable config

lmbot
published version 8.0.6, 22 days ago2 dependents licensed under $MIT
21,032

lavamoat-viz

This is a dashboard for exploring a dependency graph and LavaMoat policy file

naugtur
published version 7.0.5, a year ago0 dependents licensed under $MIT
8,798

@lavamoat/webpack

LavaMoat Webpack plugin for running dependencies in Compartments without eval

lmbot
published version 0.9.0-beta.0, 22 days ago0 dependents licensed under $Apache-2.0
346

@lavamoat/node

Next-gen LavaMoat for Node.js

lmbot
published version 0.1.0, 22 days ago0 dependents licensed under $MIT
102

@lavamoat/allow-scripts

A tool for running only the dependency lifecycle hooks specified in an allowlist.

lmbot
published version 3.3.2, 22 days ago0 dependents licensed under $MIT
90,583

@lavamoat/aa

LavaMoat's secure package naming convention

lmbot
published version 4.3.2, 22 days ago4 dependents licensed under $MIT
88,893

@lavamoat/preinstall-always-fail

Worried about accidentally running `yarn` or `npm` with script hooks enabled such as `preinstall` or `postinstall`?

lmbot
published version 2.1.0, 9 months ago3 dependents licensed under $MIT
64,623

@lavamoat/snow

standardize how to recursively own newborn windows within a web app, from the context of the app itself

weizman
published version 2.0.3, 5 months ago2 dependents licensed under $MIT
8,850

@lavamoat/git-safe-dependencies

Opinionated dependency linter for your git/github dependencies

lmbot
published version 0.2.1, 22 days ago0 dependents licensed under $MIT
16,941

@lavamoat/lavadome-react

weizman
published version 0.0.20, 6 months ago1 dependents licensed under $MIT
8,597

@lavamoat/sourcemap-validator

Map all the things, check all the maps

lgbot
published version 2.1.1, 6 months ago1 dependents licensed under $MIT
8,965

bad-example-eval-server

starts a server that evals any code sent to it. this is dangerous. This is a demonstration of the dangers, and the protections [LavaMoat](https://github.com/lavamoat/lavamoat) can provide.

kumavis
published version 1.0.0, 5 years ago0 dependents licensed under $MIT
13

@lavamoat/lavadome-core

weizman
published version 0.0.20, 6 months ago2 dependents licensed under $MIT
8,875

@lavamoat/lavatube

lavatube

kumavis
published version 1.0.0, a year ago0 dependents licensed under $MIT
252

bad-idea-eval-server

starts a server that evals any code sent to it. this is dangerous. This is a demonstration of the dangers, and the protections [LavaMoat](https://github.com/lavamoat/lavamoat) can provide.

kumavis
published version 1.0.0, 5 years ago0 dependents licensed under $MIT
12

@metamask/stake-sdk

The MetaMask Stake SDK

metamaskbot
published version 2.0.0, a month ago2 dependents
18,181