Commands
Every LPM CLI command on one page, grouped by category.
A flat reference of every top-level command. Each row links to the command's detail page; aliases are noted in parentheses.
| Command | What it does |
|---|
lpm install (i) | Install dependencies from package.json, or add new ones |
lpm fetch | Download lockfile packages into the store without installing |
lpm tidy | Find unused dependency declarations and undeclared imports |
lpm add | Source delivery — copy package source into your project (any registry) |
lpm remove (rm) | Remove a package previously brought in via lpm add |
lpm uninstall (un, unlink) | Remove from dependencies and node_modules |
lpm version | Bump package.json version, optionally commit and tag |
lpm release | Plan, apply, and publish workspace releases in dependency order |
lpm publish (p) | Publish to LPM.dev Registry (or --npm / --github) |
lpm stage | Stage, inspect, approve, or reject npm staged publishes |
lpm upgrade | Upgrade eligible LPM.dev Registry and npm dependencies, optionally scoped by package |
lpm outdated | Show dependencies with newer versions available |
lpm audit | Security + quality audit, with direct-dependency fixes |
lpm search | Search npm, custom registries, or LPM.dev Registry by query route |
lpm info | Metadata for a package from npm, custom registries, or LPM.dev Registry |
lpm quality | Quality report for a package |
lpm query | CSS-like selector queries on installed packages |
lpm graph (ls) | Dependency tree (--format dot, mermaid, json, stats, html) |
lpm why | Explain why a package is installed |
lpm rebuild | Run or rerun dependency lifecycle scripts |
lpm approve-scripts | Approve packages blocked by the default-deny script policy |
lpm trust | Manage trustedDependencies in package.json |
lpm patch | Generate a local patch (patch-package style) |
lpm patch-commit | Finalize a patch staging directory |
lpm patch-remove | Remove registered local patches |
lpm sbom | Export a CycloneDX or SPDX Software Bill of Materials |
lpm licenses | Inventory dependency licenses and enforce compliance policy |
lpm migrate | Migrate from npm / yarn / pnpm / bun |
| Command | What it does |
|---|
lpm run | Run scripts (parallel -p, cached, --watch) |
lpm dev | Zero-config dev server with HTTPS, tunnel, and orchestration |
lpm <file> / lpm exec | Run JS/TS files directly, or run project-local binaries |
lpm dlx (lpx) | Run a package without installing it |
lpm test | Auto-detect and run the project's test runner |
lpm bench | Auto-detect and run the project's benchmark runner |
| Command | What it does |
|---|
lpm use | Install and pin managed Node.js or Bun versions |
lpm env | Per-project secrets — set / get / list / push / pull / pair / OIDC, with end-to-end-encrypted cloud sync |
lpm global | Manage globally-installed CLIs (~/.lpm/global/) |
| Command | What it does |
|---|
lpm tunnel | Expose localhost; claim domains; inspect & replay webhooks |
lpm cert | Local HTTPS certificate management |
lpm proxy | Inspect and run the local-domain proxy daemon |
lpm hosts | Remove LPM CLI-managed local-domain hosts-file entries |
lpm ports | Dev-service port management |
| Command | What it does |
|---|
lpm filter | Preview the workspace set a --filter expression selects |
lpm catalog | Inspect catalog declarations and resolved lockfile snapshots |
lpm deploy | Materialize a member's deploy closure for COPY --from=pruned |
| Command | What it does |
|---|
lpm doctor | Project + environment health check (--fix to auto-repair) |
lpm health | Check registry health |
lpm policy | List, diagnose, and test local install policy extensions |
lpm store verify | Verify package store integrity |
lpm cache | Manage ephemeral caches and prune the global package store |
lpm self-update | Update LPM CLI to the latest version |
lpm completions | Emit a shell completion script (bash, zsh, fish, powershell, elvish) |
lpm schema <kind> | Emit the JSON Schema for a config file (lpm.json or lpm.config.json) |
| Command | What it does |
|---|
lpm download | Download and extract a tarball (no install side-effects) |
lpm resolve | Print a resolved dependency tree without installing |
These work on every command:
| Flag | Effect |
|---|
-V, -v, --version | Print the LPM CLI version and exit |
--token <TOKEN> | Use a specific auth token instead of the stored one (env: LPM_TOKEN) |
--registry <URL> | Override the registry URL for this command (env: LPM_REGISTRY_URL) |
--json | Emit JSON output (for CI / scripting) |
--verbose | Debug logging |
--insecure | Allow an explicitly configured plain-HTTP non-localhost registry; HTTPS redirects still cannot downgrade to HTTP |