lpm plugin

lpm plugin <action> [name]

Manages the lazy-downloaded tools that back lpm lint (Oxlint), lpm fmt (Biome), and lpm bundle (Rolldown). Oxlint and Biome are single-binary plugins cached under ~/.lpm/plugins/{name}/{version}/{platform}/. Rolldown is user-facing as a plugin, but its verified npm package layout is stored under ~/.lpm/engines/rolldown/{version}/{platform}/.

Examples

lpm plugin list                # show installed managed plugins
lpm plugin outdated            # check upstream for newer managed plugin versions
lpm plugin update              # update every installed managed plugin
lpm plugin update oxlint       # update one plugin
lpm plugin update rolldown     # update Rolldown's verified package graph
lpm plugin remove biome        # delete cached binaries for one plugin

Available plugins

tsdown is project-owned: lpm pack uses the repo's local tsdown dependency and lpm plugin update tsdown does not update it. lpm check is also not a plugin — it shells out to project-local tsc unless --engine tsgo is selected.

Pinning per-project

{
  "tools": {
    "oxlint": "1.57.0",
    "biome": "2.4.8",
    "rolldown": "1.1.3"
  }
}

For Oxlint and Biome, a pinned version downloads on first use and verifies against the upstream <asset_url>.sha256 sidecar. For Rolldown, the pinned version must already be an approved managed plugin version from lpm plugin update rolldown; otherwise lpm bundle fails with a clear repair command. Normal lpm lint, lpm fmt, and lpm bundle runs do not check upstream for newer versions.

See Built-in tools — Checksum verification for the full verification pipeline.

Subcommands

Plus the global flags — --json returns a structured listing.

See also

• lpm lint, lpm fmt — the user-facing commands plugins back
• Built-in tools — design overview, security model, cache layout