# Feature catalog — npm/cli

> Canonical page: https://codevetter.com/unpack/cli/feature-catalog

# Feature catalog — npm/cli

Scanned commit b317f16c80df02ea3628cfa77170d5ae9b59720c (2026-10-01). Generated by codevetter codevetter 1.15.0 on 2026-10-02.

Source inspection; upstream code and tests were not executed.

The command registry spans dependency maintenance, package inspection, script execution, registry administration, publishing, and developer assistance. Commands support aliases and abbreviations, with workspace behavior determined by command metadata. Specialized surfaces manage script approvals, patches, trusted publishing, and staged release approval. The catalog below groups registered commands; detailed implementation inspection concentrated on installation, execution, authentication, auditing, and publishing.
- Dependency maintenance commands include install, ci, update, uninstall, dedupe, find-dupes, prune, rebuild, and link; install supports global mode, workspace selection, package-lock-only, platform filters, and source restrictions. — [lib/utils/cmd-list.js#L5-74](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/utils/cmd-list.js#L5-L74) [lib/commands/install.js#L18-50](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/install.js#L18-L50) [lib/commands/install.js#L106-144](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/install.js#L106-L144)
- Inspection and discovery commands include ls, ll, explain, query, outdated, diff, sbom, fund, search, and view; audit implements advisory reporting, fix, and installed-package signature verification. — [lib/utils/cmd-list.js#L5-74](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/utils/cmd-list.js#L5-L74) [lib/commands/audit.js#L48-101](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/audit.js#L48-L101) [lib/commands/audit.js#L104-137](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/audit.js#L104-L137)
- Execution and project workflows include run, exec, start, stop, restart, test, install-test, install-ci-test, init, edit, and explore; npx maps to exec, and run supports script listing plus workspace execution. — [lib/utils/cmd-list.js#L19-74](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/utils/cmd-list.js#L19-L74) [bin/npx-cli.js#L3-7](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/bin/npx-cli.js#L3-L7) [lib/commands/run.js#L42-85](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/run.js#L42-L85)
- Release commands include pack, publish, unpublish, version, dist-tag, deprecate, and undeprecate; stage exposes publish, list, view, approve, reject, and download with deferred proof-of-presence. — [lib/utils/cmd-list.js#L16-74](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/utils/cmd-list.js#L16-L74) [lib/commands/stage/index.js#L3-14](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/stage/index.js#L3-L14) [lib/commands/publish.js#L204-216](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/publish.js#L204-L216)
- Account and registry administration commands include access, org, owner, team, profile, token, login, logout, and whoami; trust provides GitHub, GitLab, CircleCI, list, and revoke subcommands. — [lib/utils/cmd-list.js#L5-74](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/utils/cmd-list.js#L5-L74) [lib/commands/trust/index.js#L3-14](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/trust/index.js#L3-L14) [lib/commands/login.js#L15-44](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/login.js#L15-L44)
- Configuration and local diagnostics are registered as config, get, set, pkg, cache, doctor, ping, prefix, and root; command validation rejects unknown CLI options while unknown file settings warn unless strict-npmrc is enabled. — [lib/utils/cmd-list.js#L5-74](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/utils/cmd-list.js#L5-L74) [lib/base-cmd.js#L372-430](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/base-cmd.js#L372-L430)
- Help and navigation commands include help, help-search, docs, bugs, repo, and completion; command classes generate usage from descriptions, aliases, parameters, definitions, and subcommand tables. — [lib/utils/cmd-list.js#L5-74](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/utils/cmd-list.js#L5-L74) [lib/base-cmd.js#L25-70](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/base-cmd.js#L25-L70) [lib/base-cmd.js#L121-135](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/base-cmd.js#L121-L135)
- Policy and repair features include install-scripts approve/deny/ls/prune, approve-scripts and deny-scripts, patch add/commit/update/ls/rm, and min-release-age filtering with exemptions and blocked-audit-fix reporting. — [lib/commands/install-scripts.js#L3-19](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/install-scripts.js#L3-L19) [lib/commands/patch.js#L48-88](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/patch.js#L48-L88) [workspaces/config/lib/definitions/definitions.js#L1541-1575](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/workspaces/config/lib/definitions/definitions.js#L1541-L1575) [lib/commands/audit.js#L79-90](https://github.com/npm/cli/blob/b317f16c80df02ea3628cfa77170d5ae9b59720c/lib/commands/audit.js#L79-L90)

Every claim links to its cited files at the pinned commit. Citations identify source evidence; they do not establish runtime correctness. Independent CodeVetter scan — not reviewed by upstream maintainers.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)