# Packages (/docs/packages)





LPM CLI's package-management surface. The CLI commands are listed first; the deeper-dive concept pages explaining how the resolver, lockfile, store, save policy, and security gates fit together come below.

For an end-to-end walkthrough, see [Publishing your first package](/docs/guides/publishing-a-package) or [Migrating from npm](/docs/guides/migrating-from-npm).

## Install + dependency management [#install--dependency-management]

<Cards>
  <Card title="lpm install" href="/docs/packages/install" description="Install dependencies from package.json, or add new ones. The foundational command." />

  <Card title="lpm uninstall" href="/docs/packages/uninstall" description="Remove from dependencies and node_modules." />

  <Card title="lpm add" href="/docs/packages/add" description="Source delivery — copy a package's source into your project (any registry)." />

  <Card title="lpm remove" href="/docs/packages/remove" description="Reverse of lpm add — remove source-delivered files." />

  <Card title="lpm global" href="/docs/packages/global" description="Manage globally-installed CLIs under ~/.lpm/global/." />

  <Card title="lpm cache" href="/docs/packages/cache" description="Ephemeral caches + reference-aware prune of the global store." />

  <Card title="lpm upgrade" href="/docs/packages/upgrade" description="Bump eligible LPM.dev Registry and npm deps to their latest matching range." />

  <Card title="lpm outdated" href="/docs/packages/outdated" description="Show dependencies with newer versions available." />

  <Card title="lpm patch" href="/docs/packages/patch" description="Patch dependencies locally with integrity binding." />
</Cards>

## Publish, search, discover [#publish-search-discover]

<Cards>
  <Card title="lpm init" href="/docs/packages/init" description="Create a new LPM.dev Registry or npm-compatible package manifest." />

  <Card title="lpm version" href="/docs/packages/version" description="Bump package.json version, with optional git commit/tag and JSON plans." />

  <Card title="lpm release" href="/docs/packages/release" description="Plan, apply, and publish workspace releases in dependency order." />

  <Card title="lpm publish" href="/docs/packages/publish" description="Publish to LPM.dev Registry (or --npm / --github / --gitlab). Provenance, quality gates, secret scan." />

  <Card title="lpm stage" href="/docs/packages/stage" description="Stage, inspect, approve, or reject npm staged publishes." />

  <Card title="lpm search" href="/docs/packages/search" description="Search LPM.dev Registry." />

  <Card title="lpm info" href="/docs/packages/info" description="Metadata for npm, custom-registry, or LPM.dev Registry packages." />
</Cards>

## Security + tools [#security--tools]

<Cards>
  <Card title="lpm audit" href="/docs/packages/audit" description="Vulnerability + behavioral audit. OSV + behavioral analysis tags." />

  <Card title="lpm tidy" href="/docs/packages/tidy" description="Find unused dependency declarations and phantom imports." />

  <Card title="lpm query" href="/docs/packages/query" description="CSS-like selector queries on installed packages — precision gates for CI." />

  <Card title="lpm graph" href="/docs/packages/graph" description="Render the dependency graph as tree, DOT, Mermaid, JSON, stats, or HTML." />

  <Card title="lpm sbom" href="/docs/packages/sbom" description="Export CycloneDX or SPDX SBOMs from lpm.lock." />

  <Card title="lpm licenses" href="/docs/packages/licenses" description="Inventory dependency licenses and fail CI on compliance policy." />

  <Card title="lpm trust" href="/docs/packages/trust" description="Manage trustedDependencies — list, diff, prune." />

  <Card title="lpm rebuild" href="/docs/packages/rebuild" description="Run lifecycle scripts (the deferred step of install)." />

  <Card title="lpm approve-scripts" href="/docs/packages/approve-scripts" description="Approve packages blocked by the default-deny lifecycle script policy." />
</Cards>

## Migration + inspection [#migration--inspection]

<Cards>
  <Card title="lpm migrate" href="/docs/packages/migrate" description="Convert from npm / pnpm / yarn / bun. Backups + rollback." />

  <Card title="lpm catalog" href="/docs/packages/catalog" description="Inspect catalog usage and resolved lockfile snapshots." />

  <Card title="lpm fetch" href="/docs/packages/fetch" description="Populate the package store from lpm.lock without installing." />

  <Card title="lpm download" href="/docs/packages/download" description="Download and extract a tarball with no install side-effects." />

  <Card title="lpm resolve" href="/docs/packages/resolve" description="Print a resolved dependency tree without installing." />
</Cards>

## Specialized integrations [#specialized-integrations]

<Cards>
  <Card title="lpm pool" href="/docs/packages/pool" description="Pool revenue stats with per-package weighted downloads." />

  <Card title="lpm quality" href="/docs/packages/quality" description="Quality report for an LPM.dev Registry package." />

  <Card title="lpm swift-registry" href="/docs/packages/swift-registry" description="Configure SPM to install LPM.dev Registry-hosted Swift packages (SE-0292)." />

  <Card title="lpm skills" href="/docs/packages/skills" description="Manage package-published and standalone AI agent skills." />
</Cards>

## Features (concept pages) [#features-concept-pages]

<Cards>
  <Card title="Resolver" href="/docs/packages/resolver" description="Greedy-fusion by default, with PubGrub as the documented opt-out." />

  <Card title="Lockfile" href="/docs/packages/lockfile" description="Authoritative lpm.lock TOML plus lpm.lockb when the graph fits the binary format." />

  <Card title="Content-addressable store" href="/docs/packages/content-addressable-store" description="One on-disk copy per content hash; per-graph link entries; shared across projects." />

  <Card title="Save policy" href="/docs/packages/save-policy" description="How version ranges land in package.json — caret default, explicit preservation, prerelease safety." />

  <Card title="Security & audit" href="/docs/packages/security-audit" description="Defense in depth — script policy, behavioral analysis, OSV, provenance, typosquatting, triage gate." />

  <Card title="Workspaces" href="/docs/packages/workspaces" description="Monorepo support — declaration, filter grammar, workspace:* protocol, catalogs, deploy." />

  <Card title="npm compatibility" href="/docs/packages/npm-compatibility" description="What works the same as npm, what's different, and what LPM CLI adds." />

  <Card title="Swift Package Registry (SE-0292)" href="/docs/packages/swift-package-registry" description="The SE-0292 implementation — identity mapping, signing, trust model." />
</Cards>