Skip to content
LavaMoat

Getting Started

Prerequisites

Section titled “Prerequisites”

LavaMoat is distributed as a Node.js command-line tool. You’ll need an LTS version of Node.js:

  • Node.js LTS (recommended) or
  • Node.js v18 (minimum)

How to secure your app against supply-chain attacks

Section titled “How to secure your app against supply-chain attacks”
  1. Control dependency lifecycle scripts (eg. “postinstall”) via @lavamoat/allow-scripts
  2. Run your server or build process in lavamoat-node
  3. Build your ui with our Webpack5 plugin or use LavaMoat for Browserify