What is lavamoat-tofu?
lavamoat-tofu is a npm that This is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable config. It has a Nerq Trust Score of 78/100 (B+). 0 GitHub stars. Published by kumavis. Last analyzed May 2026.
Why This Score
- ⚠️ Security: 0/100 — Some security concerns
- ⚠️ Maintenance: 0/100 — Maintenance activity is low
- ⚠️ Community: 0 stars, 0 downloads — Growing community
- ⚠️ Transparency: License: Not specified — No license specified
Trust & Safety Overview
What lavamoat-tofu Does
lavamoat-tofu is a npm in the npm category. This is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable config. It is published by kumavis and has no specified license. With 0 GitHub stars and 0 downloads, it has a small community of users and contributors.
Who Should Use lavamoat-tofu
lavamoat-tofu is well-suited for production use given its strong trust score and active community.
Details
| Author | kumavis |
|---|---|
| Category | npm |
| License | Not specified |
| Type | npm |
| Source | View on GitHub |
| Security Score | 0/100 |
| Activity Score | 0/100 |
How to Get Started
Check the trust score before installing:
curl nerq.ai/v1/preflight?target=lavamoat-tofu
Setup guide · Full safety report · Production review · Is it safe?
Frequently Asked Questions
Last updated May 2026. Trust scores based on automated analysis of public data.