Package Managers gate
235 allow
218 ask
0 block
Language package managers. Listing, inspecting, and auditing are safe. Installing, removing, publishing, and running arbitrary scripts ask. No hard blocks at this layer (the dangerous floor is filesystem-level).
Showing all 453 rules.
Allowed · inspection
rules/package_managers.toml#allow 235 patternsbun pm ls
Allow
Lists installed packages in the bun store or project. Read-only.
bun pm bin
Allow
Prints the path to the project or global bin directory. Read-only.
bun pm hash
Allow
Prints or verifies the lockfile hash. Read-only.
bun pm untrusted
Allow
Lists dependencies whose postinstall scripts were blocked as untrusted. Read-only.
bun -v
Allow
Prints the bun version. Read-only.
bun --version
Allow
Prints the bun version. Read-only.
bun -h
Allow
Prints bun help. Read-only.
bun --help
Allow
Prints bun help. Read-only.
bun test
Allow
Runs the project's test suite with Bun's test runner. Compiles and executes test code locally.
bun build
Allow
Bundles the project's entry points into output artifacts. Local build step.
bun dev
Allow
Runs the package
dev script from package.json. Starts the local dev workflow.bun lint
Allow
Runs the package
lint script from package.json. Reports style and correctness issues.bun check
Allow
Runs the package
check script from package.json. Local validation step.bun typecheck
Allow
Runs the package
typecheck script from package.json. Reports type errors.bun format
Allow
Runs the package
format script from package.json. Rewrites local source to match style.cargo check
Allow
Type-checks the crate without producing a final binary. Writes only build artifacts under
target.cargo clippy
Allow
Runs the Clippy linter over the crate and reports warnings. Read-only unless
--fix is present, which is gated separately.cargo doc
Allow
Builds the crate's API documentation into
target/doc. Writes only documentation artifacts.cargo tree
Allow
Displays the crate dependency graph as a tree. Read-only.
cargo metadata
Allow
Prints resolved package and dependency metadata as JSON. Read-only.
cargo pkgid
Allow
Prints the fully qualified package ID for a dependency. Read-only.
cargo verify-project
Allow
Checks that the
Cargo.toml manifest is valid and reports the result. Read-only.cargo search
Allow
Searches crates.io for packages matching the given terms. Read-only.
cargo info
Allow
Shows registry metadata for a crate (versions, features, dependencies). Read-only.
cargo locate-project
Allow
Prints the path to the nearest
Cargo.toml. Read-only.cargo read-manifest
Allow
Prints the resolved manifest of the current package as JSON. Read-only.
cargo version
Allow
Prints the cargo version. Read-only.
cargo -V
Allow
Prints the cargo version. Read-only.
cargo --version
Allow
Prints the cargo version. Read-only.
cargo -h
Allow
Prints cargo help. Read-only.
cargo --help
Allow
Prints cargo help. Read-only.
cargo help
Allow
Prints help for cargo or a specific subcommand. Read-only.
cargo build
Allow
Compiles the local crate and its dependencies into the
target directory. Local build; fetches declared dependencies as needed.cargo run
Allow
Builds and runs the crate's binary target locally. Executes the just-built local binary.
cargo test
Allow
Builds and runs the crate's test suite. Compiles and executes test code locally.
cargo bench
Allow
Builds and runs the crate's benchmarks. Compiles and executes benchmark code locally.
cargo fmt
Allow
Formats Rust source files in place using
rustfmt. Rewrites local source to match style.cargo clean
Allow
Removes the
target build-output directory. Deletes only local build artifacts; next build recompiles.cargo nextest
Allow
Builds and runs the test suite with the nextest runner. Compiles and executes test code locally.
cargo audit
Allow
Scans
Cargo.lock for dependencies with known security advisories. Read-only.cargo deny
Allow
Checks dependencies against license, advisory, and ban policies. Read-only.
cargo expand
Allow
Prints the crate source after macro expansion. Read-only.
cargo semver-checks
Allow
Compares the crate's public API against a baseline for semver violations. Read-only.
cargo llvm-cov
Allow
Runs the test suite and reports code coverage. Compiles and executes test code locally.
cargo outdated
Allow
Reports dependencies that have newer versions available. Read-only; no updates.
cargo bloat
Allow
Analyzes the built binary and reports what takes up space. Read-only.
cargo machete
Allow
Scans for declared but unused dependencies and reports them. Read-only.
cargo depgraph
Allow
Generates a dependency-graph description for the crate. Read-only.
cargo insta
Allow
Runs insta snapshot tests and reports mismatches. Read-only unless
review, accept, or reject is present, which is gated separately.conda info
Allow
Prints conda installation and environment configuration details. Read-only.
conda list
Allow
Lists packages installed in the active or named environment. Read-only.
conda search
Allow
Searches configured channels for packages matching the given terms. Read-only.
conda config
Allow
Shows conda config values. Read-only unless a write flag (
--add, --remove, --set, --append, --prepend, --remove-key) is present, which is gated separately.conda --version
Allow
Prints the conda version. Read-only.
conda -V
Allow
Prints the conda version. Read-only.
conda --help
Allow
Prints conda help. Read-only.
conda -h
Allow
Prints conda help. Read-only.
conda doctor
Allow
Runs environment health checks and reports integrity findings. Read-only.
conda notices
Allow
Displays channel notices and announcements. Read-only.
conda compare
Allow
Compares the active environment against an environment spec file and reports differences. Read-only.
conda env list
Allow
Lists all conda environments on the machine. Read-only.
go list
Allow
Lists the packages or modules matching the given import paths. Read-only.
go doc
Allow
Prints documentation for a package, symbol, or method. Read-only.
go env
Allow
Prints Go environment configuration. Read-only unless
-w or -u is present, which is gated separately.go version
Allow
Prints the Go version. Read-only.
go vet
Allow
Runs Go static analysis and reports suspicious constructs. Read-only.
go help
Allow
Prints help for the go command or a topic. Read-only.
go -h
Allow
Prints go command help. Read-only.
go --help
Allow
Prints go command help. Read-only.
go build
Allow
Compiles the packages in the current module to verify they build. Local build; fetches declared dependencies as needed.
go test
Allow
Builds and runs the module's test suite. Compiles and executes test code locally.
go clean
Allow
Removes object files and cached build artifacts for the current module. Deletes only generated artifacts.
go mod graph
Allow
Prints the module requirement graph. Read-only.
go mod verify
Allow
Checks that downloaded module dependencies match
go.sum and reports the result. Read-only.go mod why
Allow
Explains why a package or module is needed by the build. Read-only.
mise ls
Allow
Lists installed tool versions managed by mise. Read-only.
mise list
Allow
Lists installed tool versions managed by mise (
mise list aliases mise ls). Read-only.mise ls-remote
Allow
Lists versions available to install for a tool from upstream. Read-only.
mise current
Allow
Prints the tool versions active in the current directory. Read-only.
mise where
Allow
Prints the install path of a given tool version. Read-only.
mise which
Allow
Prints the resolved path to a tool binary. Read-only.
mise env
Allow
Prints the environment variables mise would export for the current directory. Read-only.
mise version
Allow
Prints the mise version. Read-only.
mise --version
Allow
Prints the mise version. Read-only.
mise -V
Allow
Prints the mise version. Read-only.
mise --help
Allow
Prints mise help. Read-only.
mise -h
Allow
Prints mise help. Read-only.
mise help
Allow
Prints help for mise or a specific subcommand. Read-only.
mise doctor
Allow
Runs mise health checks and reports configuration problems. Read-only.
mise plugins
Allow
Lists installed mise plugins. Read-only unless an install/remove/update subcommand is given, which is gated separately.
mise settings get
Allow
Prints the value of a single mise setting. Read-only.
mise settings ls
Allow
Lists mise settings and their values. Read-only.
mise alias get
Allow
Prints the version an alias resolves to for a tool. Read-only.
mise alias ls
Allow
Lists tool-version aliases configured in mise. Read-only.
mise bin-paths
Allow
Prints the bin directories mise would add to PATH. Read-only.
mise completion
Allow
Prints shell completion scripts for mise. Read-only; output is not installed automatically.
mise direnv
Allow
Prints direnv integration helpers for mise. Read-only; output is not installed automatically.
mise outdated
Allow
Reports installed tool versions that have newer releases available. Read-only; no updates.
mise reshim
Allow
Regenerates mise shim scripts for installed tools. Rewrites only mise-managed shim files.
mise trust
Allow
Marks a project's mise config file as trusted so its tool versions and env load. Records trust for the local config path.
mise exec
Allow
Runs a command with mise-managed tool versions on PATH. Devtool delegation is handled by the mise handler.
mise activate
Allow
Prints the shell activation script to stdout. Nothing is executed or written; the caller decides whether to eval it.
mise deactivate
Allow
Prints the script that undoes shell activation. Takes no arguments and writes nothing.
mise registry
Allow
Lists tools available in the mise registry. Read-only.
npm list
Allow
Lists installed packages in the dependency tree. Read-only.
npm ls
Allow
Lists installed packages in the dependency tree (
npm ls aliases npm list). Read-only.npm ll
Allow
Lists installed packages in long format with extra detail. Read-only.
npm la
Allow
Lists installed packages in long format including transitive deps. Read-only.
npm view
Allow
Shows registry metadata for a package (versions, dependencies, dist-tags). Read-only.
npm show
Allow
Shows registry metadata for a package (
npm show aliases npm view). Read-only.npm info
Allow
Shows registry metadata for a package (
npm info aliases npm view). Read-only.npm search
Allow
Searches the registry for packages matching the given terms. Read-only.
npm help
Allow
Prints help for npm or a specific subcommand. Read-only.
npm config
Allow
Shows npm config values. Read-only unless
set, delete, or edit is present, which is gated separately.npm get
Allow
Reads a single npm config value. Read-only.
npm prefix
Allow
Prints the npm prefix (install root) path. Read-only.
npm root
Allow
Prints the effective
node_modules path. Read-only.npm bin
Allow
Prints the directory where npm installs executables. Read-only.
npm whoami
Allow
Prints the username of the logged-in registry account. Read-only.
npm token list
Allow
Lists authentication tokens for the registry account. Read-only.
npm team ls
Allow
Lists teams in an organization or the members of a team. Read-only.
npm team list
Allow
Lists teams in an organization or the members of a team. Read-only.
npm outdated
Allow
Reports which installed packages are out of date versus the registry. Read-only; no installs.
npm doctor
Allow
Runs environment and registry health checks and reports findings. Read-only.
npm explain
Allow
Explains why a package is present in the dependency tree. Read-only.
npm why
Allow
Explains why a package is installed and what depends on it. Read-only.
npm fund
Allow
Lists funding URLs declared by installed dependencies. Read-only.
npm audit
Allow
Reports known vulnerabilities in the dependency tree. Read-only unless
fix is present, which is gated separately.npm query
Allow
Runs a dependency-selector query against the installed tree. Read-only.
npm -v
Allow
Prints the npm version. Read-only.
npm --version
Allow
Prints the npm version. Read-only.
npm -h
Allow
Prints npm help. Read-only.
npm --help
Allow
Prints npm help. Read-only.
npm test
Allow
Runs the package
test script from package.json. Compiles and executes test code locally.npm build
Allow
Runs the package
build script from package.json. Local build step.npm dev
Allow
Runs the package
dev script from package.json. Starts the local dev workflow.npm lint
Allow
Runs the package
lint script from package.json. Reports style and correctness issues.npm check
Allow
Runs the package
check script from package.json. Local validation step.npm typecheck
Allow
Runs the package
typecheck script from package.json. Reports type errors.npm format
Allow
Runs the package
format script from package.json. Rewrites local source to match style.npm prettier
Allow
Delegates to the Prettier formatter via npm. Formatting is gated by the devtools handler.
npm eslint
Allow
Delegates to the ESLint linter via npm. Linting is read-only unless
--fix is passed.npm tsc
Allow
Delegates to the TypeScript compiler via npm. Reports type errors and emits declared output.
pip list
Allow
Lists installed Python packages and their versions. Read-only.
pip show
Allow
Shows metadata for an installed package (version, location, dependencies). Read-only.
pip freeze
Allow
Prints installed packages in
requirements.txt format. Read-only.pip check
Allow
Verifies that installed packages have compatible dependencies and reports conflicts. Read-only.
pip search
Allow
Searches the package index for matching packages. Read-only.
pip index
Allow
Queries package index information such as available versions. Read-only.
pip config
Allow
Shows pip config values. Read-only unless
set, edit, or unset is present, which is gated separately.pip cache
Allow
Shows pip cache info and location. Read-only unless
purge or remove is present, which is gated separately.pip debug
Allow
Prints pip and environment debug information. Read-only.
pip -V
Allow
Prints the pip version. Read-only.
pip --version
Allow
Prints the pip version. Read-only.
pip -h
Allow
Prints pip help. Read-only.
pip --help
Allow
Prints pip help. Read-only.
pipx list
Allow
Lists applications installed by pipx and their entrypoints. Read-only.
pipx environment
Allow
Prints pipx environment paths and configuration. Read-only.
pipx --version
Allow
Prints the pipx version. Read-only.
pipx --help
Allow
Prints pipx help. Read-only.
pnpm list
Allow
Lists installed packages in the dependency tree. Read-only.
pnpm ls
Allow
Lists installed packages in the dependency tree (
pnpm ls aliases pnpm list). Read-only.pnpm ll
Allow
Lists installed packages in long format with extra detail. Read-only.
pnpm why
Allow
Explains why a package is installed and what depends on it. Read-only.
pnpm outdated
Allow
Reports which installed packages are out of date versus the registry. Read-only; no installs.
pnpm audit
Allow
Reports known vulnerabilities in the dependency tree. Read-only unless
--fix is present, which is gated separately.pnpm -v
Allow
Prints the pnpm version. Read-only.
pnpm --version
Allow
Prints the pnpm version. Read-only.
pnpm -h
Allow
Prints pnpm help. Read-only.
pnpm --help
Allow
Prints pnpm help. Read-only.
pnpm test
Allow
Runs the package
test script from package.json. Compiles and executes test code locally.pnpm build
Allow
Runs the package
build script from package.json. Local build step.pnpm dev
Allow
Runs the package
dev script from package.json. Starts the local dev workflow.pnpm lint
Allow
Runs the package
lint script from package.json. Reports style and correctness issues.pnpm check
Allow
Runs the package
check script from package.json. Local validation step.pnpm typecheck
Allow
Runs the package
typecheck script from package.json. Reports type errors.pnpm format
Allow
Runs the package
format script from package.json. Rewrites local source to match style.pnpm tsc
Allow
Delegates to the TypeScript compiler via pnpm. Reports type errors and emits declared output.
poetry show
Allow
Lists installed packages or shows details for one package. Read-only.
poetry search
Allow
Searches configured repositories for packages matching the given terms. Read-only.
poetry check
Allow
Validates the
pyproject.toml and lockfile consistency and reports problems. Read-only.poetry config
Allow
Shows poetry config values. Read-only unless
--unset is present, which removes a key.poetry config list
Allow
Lists all poetry config values. Read-only.
poetry env info
Allow
Shows information about the active project virtualenv. Read-only.
poetry env list
Allow
Lists the virtualenvs associated with the project. Read-only.
poetry env activate
Allow
Prints the command to activate the project virtualenv. Read-only; does not modify the shell itself.
poetry version
Allow
Prints the project version or the poetry version. Read-only.
poetry about
Allow
Prints information about poetry itself. Read-only.
poetry --version
Allow
Prints the poetry version. Read-only.
poetry -V
Allow
Prints the poetry version. Read-only.
poetry --help
Allow
Prints poetry help. Read-only.
poetry -h
Allow
Prints poetry help. Read-only.
poetry build
Allow
Builds source and wheel distributions into
dist/. Writes artifacts; does not publish.poetry lock
Allow
Resolves dependencies and writes
poetry.lock. Network access; pinned versions may change.rustc --version -V --print --explain --help -h -vV
Allow
Queries the Rust compiler for version, target, or diagnostic info without compiling. Read-only.
rustup show
Allow
Shows the active toolchain and installed targets and components. Read-only.
rustup toolchain list
Allow
Lists installed Rust toolchains. Read-only.
rustup target list
Allow
Lists available and installed compilation targets. Read-only.
rustup component list
Allow
Lists available and installed toolchain components. Read-only.
rustup run
Allow
Runs a command under a specific toolchain without changing the default. Executes the named command with that toolchain on PATH.
rustup which
Allow
Prints the resolved path to a binary for the active toolchain. Read-only.
rustup doc
Allow
Opens or locates the offline Rust documentation for the active toolchain. Read-only.
rustup --version
Allow
Prints the rustup version. Read-only.
rustup -V
Allow
Prints the rustup version. Read-only.
rustup --help
Allow
Prints rustup help. Read-only.
rustup -h
Allow
Prints rustup help. Read-only.
rustup help
Allow
Prints help for rustup or a specific subcommand. Read-only.
uv version
Allow
Prints the uv version. Read-only.
uv help
Allow
Prints help for uv or a specific subcommand. Read-only.
uv tree
Allow
Displays the project dependency graph as a tree. Read-only.
uv --version
Allow
Prints the uv version. Read-only.
uv -V
Allow
Prints the uv version. Read-only.
uv -h
Allow
Prints uv help. Read-only.
uv --help
Allow
Prints uv help. Read-only.
uv pip list
Allow
Lists packages in the active venv via uv's pip-compatible frontend. Read-only.
uv pip show
Allow
Shows metadata for a package in the active venv via uv's pip-compatible frontend. Read-only.
uv pip freeze
Allow
Prints active-venv packages in
requirements.txt format via uv's pip-compatible frontend. Read-only.uv pip check
Allow
Verifies active-venv dependencies are compatible via uv's pip-compatible frontend. Read-only.
yarn list
Allow
Lists installed packages in the dependency tree. Read-only.
yarn info
Allow
Shows registry metadata for a package (versions, dependencies). Read-only.
yarn why
Allow
Explains why a package is installed and what depends on it. Read-only.
yarn outdated
Allow
Reports which installed packages are out of date versus the registry. Read-only; no installs.
yarn audit
Allow
Reports known vulnerabilities in the dependency tree. Read-only.
yarn config
Allow
Shows yarn config values. Read-only unless
set or delete is present, which is gated separately.yarn -v
Allow
Prints the yarn version. Read-only.
yarn --version
Allow
Prints the yarn version. Read-only.
yarn -h
Allow
Prints yarn help. Read-only.
yarn --help
Allow
Prints yarn help. Read-only.
yarn test
Allow
Runs the package
test script from package.json. Compiles and executes test code locally.yarn build
Allow
Runs the package
build script from package.json. Local build step.yarn dev
Allow
Runs the package
dev script from package.json. Starts the local dev workflow.yarn lint
Allow
Runs the package
lint script from package.json. Reports style and correctness issues.yarn check
Allow
Runs the package
check script from package.json. Local validation step.yarn typecheck
Allow
Runs the package
typecheck script from package.json. Reports type errors.yarn format
Allow
Runs the package
format script from package.json. Rewrites local source to match style.Asks first · mutations
rules/package_managers.toml#ask 218 patternsbun pm trust
Ask
Runs the blocked postinstall scripts for the named or all dependencies. Executes third-party install scripts; same trust boundary as running arbitrary code.
bun pm cache
Ask
Inspects or clears the bun install cache.
bun pm cache rm deletes all cached packages.bun run
Ask
Running script from package.json
bun start
Ask
Running start script
bun install
Ask
Installing packages
bun i
Ask
Installing packages
bun add
Ask
Adding packages
bun remove
Ask
Removing packages
bun rm
Ask
Removing packages
bun update
Ask
Updating packages
bun link
Ask
Creates a global symlink and links the package into node_modules. Modifies bun's global link registry; can shadow real installs of
<package>.bun unlink
Ask
Removes the global symlink created by
bun link. Affects every project that consumed the linked package.bun x
Ask
Runs an arbitrary command through bun (downloads the package if missing). Same trust boundary as
curl | bash for untrusted packages.bun init
Ask
Initializes a new bun project in the current directory by writing
package.json and supporting files.bun create
Ask
Scaffolds a project from a
create-<name> template, downloading it if missing. Same trust boundary as curl | bash for untrusted initializers.bun publish
Ask
Publishes the package to its registry. Public publish is irreversible: the version number cannot be reused.
cargo clippy --fix
Ask
Auto-fixing lint suggestions
cargo insta review accept reject
Ask
Reviews or applies insta snapshot changes.
accept overwrites .snap files with current output; reject discards pending snapshots.cargo watch
Ask
Re-runs a given cargo command on every file change. Executes that command repeatedly; runs until interrupted.
cargo mutants
Ask
Mutation testing rewrites source files to introduce synthetic bugs and checks test coverage. Files are restored on completion; interrupting mid-run can leave the tree mutated.
cargo install
Ask
Installs a binary crate into
~/.cargo/bin. Compiles from source and puts the binary on PATH for the current user.cargo uninstall
Ask
Removes a previously
cargo installed binary from ~/.cargo/bin.cargo new
Ask
Scaffolds a new Cargo package in a new directory, writing
Cargo.toml and src/.cargo init
Ask
Initializing project
cargo add
Ask
Adding dependency
cargo remove
Ask
Removing dependency
cargo update
Ask
Updates dependencies in
Cargo.lock to newer compatible versions. Changes resolved versions; no manifest edits.cargo publish
Ask
Publishing crate
cargo yank
Ask
Yanks a published crate version on crates.io so new projects can't select it. Existing lockfiles keep resolving it; reversible with
--undo.cargo fix
Ask
Applies compiler-suggested fixes to source files in place. Rewrites code; run on a clean tree so changes stay reviewable.
cargo generate-lockfile
Ask
Creates or regenerates
Cargo.lock by resolving dependencies. May change pinned versions.conda config --add --remove --set --append --prepend --remove-key
Ask
Modifying conda config
conda package
Ask
Low-level conda package build helpers.
--reset clears package metadata and --untracked alters tracking; rarely used outside package authoring.conda install
Ask
Installing packages
conda remove
Ask
Removing packages
conda uninstall
Ask
Uninstalling packages
conda update
Ask
Updating packages
conda upgrade
Ask
Upgrading packages
conda create
Ask
Creating environment
conda activate
Ask
Activating environment
conda deactivate
Ask
Deactivating environment
conda clean
Ask
Mutates the conda cache (packages, tarballs, indexes). Frees disk; next install re-downloads.
conda build
Ask
Builds a conda package from a recipe. Writes artifacts under the conda-bld directory.
conda init
Ask
Modifies shell rc files (
.bashrc, .zshrc, etc.) to initialize conda on shell startup.conda run
Ask
Runs a command inside a named conda environment. Treat as executing that command with the env's interpreter on PATH.
conda env create
Ask
Creates a new conda environment from a name or YAML spec. Downloads packages and writes under the conda envs dir.
conda env remove
Ask
Deletes a named conda environment and everything installed in it. Not reversible without re-creation.
go env -w -u
Ask
Modifying Go environment config
go fmt
Ask
Formatting files
go run
Ask
Executing Go code
go mod tidy
Ask
Tidying go.mod/go.sum
go mod download
Ask
Downloading modules
go install
Ask
Installing
go get
Ask
Adds or updates module dependencies in
go.mod/go.sum and downloads them. Changes the dependency set.go generate
Ask
Runs
//go:generate directives found in source. Executes arbitrary commands those directives specify.go fix
Ask
Rewrites packages to use newer Go APIs in place. Modifies source files.
go work
Ask
Manages the Go workspace file
go.work (init, use, edit, sync). Changes which modules resolve locally.go mod init
Ask
Initializes a new module by writing
go.mod in the current directory.go mod edit
Ask
Edits
go.mod programmatically (require, replace, drop, go directive). Rewrites the manifest.mise settings set
Ask
Sets a mise setting. Writes to the mise config; changes tool resolution and runtime behavior.
mise settings unset
Ask
Removes a mise setting, reverting it to the default. Writes to the mise config.
mise settings add
Ask
Appends a value to a list-valued mise setting. Writes to the mise config.
mise alias set
Ask
Defines or overwrites a tool-version alias. Writes to the mise config; changes which version the alias resolves to.
mise alias unset
Ask
Removes a tool-version alias. Writes to the mise config.
mise run
Ask
Running mise task
mise task
Ask
Manages or runs mise tasks (run, ls, edit, add).
mise task run executes shell from the task file; treat as running that script.mise tasks
Ask
Manages or runs mise tasks (run, ls, edit, add).
mise tasks run executes shell from the task file; treat as running that script.mise install
Ask
Installing tool versions
mise i
Ask
Installing tool versions
mise use
Ask
Setting tool version
mise u
Ask
Setting tool version
mise upgrade
Ask
Upgrading tools
mise up
Ask
Upgrading tools
mise uninstall
Ask
Uninstalling tools
mise prune
Ask
Pruning unused versions
mise sync
Ask
Syncing tool versions
mise implode
Ask
Removing mise installation
mise self-update
Ask
Updating mise itself
mise plugins install
Ask
Installing plugin
mise plugins add
Ask
Installing plugin
mise plugins remove
Ask
Removing plugin
mise plugins update
Ask
Updating plugins
mise cache
Ask
Mutates the mise cache (clear). Deletes cached tool downloads; next install will re-download.
mise link
Ask
Symlinks an externally-installed tool version into mise's data dir so it can be selected like a managed version.
npm config set delete edit
Ask
Modifying npm config
npm token create
Ask
Creates a new npm registry auth token. Mints a credential that can publish and modify packages; store it securely.
npm token revoke
Ask
Revokes an npm registry auth token by id or value. Immediately invalidates that credential for every consumer.
npm token delete
Ask
Deletes an npm registry auth token. Immediately invalidates that credential.
npm team create
Ask
Creates a team in an organization on the registry. Changes the org's team structure.
npm team destroy
Ask
Destroys a team in an organization on the registry. Removes the team and its access grants.
npm team add
Ask
Adds a user to an organization team on the registry. Grants that user the team's package access.
npm team rm
Ask
Removes a user from an organization team on the registry. Revokes that user's team package access.
npm audit fix
Ask
Fixing vulnerabilities (modifies dependencies)
npm run
Ask
Running script from package.json
npm run-script
Ask
Running script from package.json
npm start
Ask
Running start script
npm install
Ask
Installing packages
npm i
Ask
Installing packages
npm add
Ask
Installing packages
npm ci
Ask
Clean install
npm uninstall
Ask
Uninstalling packages
npm remove
Ask
Uninstalling packages
npm rm
Ask
Uninstalling packages
npm un
Ask
Uninstalling packages
npm update
Ask
Updating packages
npm up
Ask
Updating packages
npm upgrade
Ask
Updating packages
npm link
Ask
Creates a global symlink to this package and links it into node_modules. Modifies the global npm prefix; can shadow real installs of
<package> system-wide.npm unlink
Ask
Removes the global symlink created by
npm link. Affects every project that consumed the linked package.npm publish
Ask
Publishes the package to its registry. Public publish is irreversible: the version number cannot be reused.
npm unpublish
Ask
Removes a published version from the registry. Public unpublish is restricted by npm policy and can break downstream consumers.
npm deprecate
Ask
Marks a published version as deprecated on the registry. Shows a warning to every future install of that version.
npm init
Ask
Initializes a new package in the current directory by writing
package.json. With npm init <initializer> it runs an arbitrary create-<initializer> package.npm create
Ask
Runs a
create-<name> package to scaffold a project, downloading it if missing. Same trust boundary as curl | bash for untrusted initializers.npm exec
Ask
Runs an arbitrary command through the package manager (downloads the package if missing). Same trust boundary as
curl | bash for untrusted packages.npm npx
Ask
Runs an arbitrary command through
npx (downloads the package if missing). Same trust boundary as curl | bash for untrusted packages.npm prune
Ask
Removes packages from
node_modules that are not listed in package.json.npm dedupe
Ask
Rewrites
node_modules and package-lock.json to reduce duplication. Can change resolved versions.npm shrinkwrap
Ask
Writes
npm-shrinkwrap.json to lock the dependency tree for publishing.npm cache
Ask
Mutates the npm cache (verify, clean, add).
npm cache clean --force wipes all cached tarballs and metadata.npm pack
Ask
Builds a tarball of the package as it would be published. Writes a
.tgz file to the cwd.npm set
Ask
Sets an npm config key. Default scope is the user-level
.npmrc; --global writes to the global prefix.pip config set edit unset
Ask
Modifying pip config
pip cache purge remove
Ask
Deleting pip cache
pip install
Ask
Installing packages
pip uninstall
Ask
Uninstalling packages
pip download
Ask
Downloading packages
pip wheel
Ask
Building wheel
pipx install
Ask
Installing application
pipx uninstall
Ask
Uninstalling application
pipx upgrade
Ask
Upgrading application
pipx upgrade-all
Ask
Upgrading all applications
pipx reinstall
Ask
Reinstalling application
pipx reinstall-all
Ask
Reinstalling all
pipx inject
Ask
Injecting package
pipx uninject
Ask
Uninjecting package
pipx ensurepath
Ask
Modifying PATH
pipx run
Ask
Running application
pnpm audit --fix
Ask
Fixing vulnerabilities (modifies dependencies)
pnpm run
Ask
Running script from package.json
pnpm start
Ask
Running start script
pnpm exec
Ask
Runs an arbitrary command through the package manager (downloads the package if missing). Same trust boundary as
curl | bash for untrusted packages.pnpm install
Ask
Installing packages
pnpm i
Ask
Installing packages
pnpm add
Ask
Adding packages
pnpm remove
Ask
Removing packages
pnpm rm
Ask
Removing packages
pnpm uninstall
Ask
Removing packages
pnpm update
Ask
Updating packages
pnpm up
Ask
Updating packages
pnpm link
Ask
Creates a global symlink and links the package into node_modules. Modifies the global pnpm store and can shadow real installs of
<package>.pnpm unlink
Ask
Removes the global symlink created by
pnpm link. Affects every project that consumed the linked package.pnpm publish
Ask
Publishes the package to its registry. Public publish is irreversible: the version number cannot be reused.
pnpm init
Ask
Initializes a new package in the current directory by writing
package.json.pnpm create
Ask
Runs a
create-<name> package to scaffold a project, downloading it if missing. Same trust boundary as curl | bash for untrusted initializers.pnpm dlx
Ask
Runs an arbitrary command through the package manager (downloads the package if missing). Same trust boundary as
curl | bash for untrusted packages.pnpm prune
Ask
Removes packages from
node_modules and the pnpm store that are not listed in package.json.pnpm store
Ask
Mutates the shared pnpm content-addressable store (prune, add, status).
store prune deletes orphaned packages used by no project on this machine.pnpm patch
Ask
Creates an editable copy of a dependency in a temp dir;
patch-commit writes a persistent patch file consumed by future installs.poetry env use
Ask
Creating/activating Python environment
poetry env remove
Ask
Removing Python environment
poetry run
Ask
Running arbitrary command in environment
poetry shell
Ask
Spawning interactive shell
poetry install
Ask
Installing dependencies
poetry add
Ask
Adding dependency
poetry remove
Ask
Removing dependency
poetry update
Ask
Updating dependencies
poetry init
Ask
Initializing project
poetry new
Ask
Creating project
poetry publish
Ask
Publishes the package to its registry. Public publish is irreversible: the version number cannot be reused.
poetry cache
Ask
Mutates the poetry cache (clear, list).
poetry cache clear --all deletes cached package tarballs and wheels.poetry export
Ask
Writes the locked dependencies to a
requirements.txt-style file. Output path may overwrite existing files.poetry self
Ask
Manages the poetry installation itself: add, update, lock, sync of poetry plugins. Modifies the user-global poetry environment.
poetry source
Ask
Adds, removes, or shows package index sources in
pyproject.toml. Changes where future installs resolve from.rustc
Ask
Compiles Rust source directly with rustc. Writes an output binary or library to the cwd or
-o path.rustup install
Ask
Installing toolchain
rustup update
Ask
Updating toolchains
rustup default
Ask
Changing default toolchain
rustup toolchain install
Ask
Installing toolchain
rustup toolchain uninstall
Ask
Uninstalling toolchain
rustup target add
Ask
Adding compilation target
rustup target remove
Ask
Removing compilation target
rustup component add
Ask
Adding component
rustup component remove
Ask
Removing component
rustup override
Ask
Setting toolchain override
rustup self
Ask
Modifying rustup installation
uv run
Ask
Runs a command inside the project venv. Will create the venv and download missing dependencies from the lockfile on first run.
uv sync
Ask
Reconciles the project venv with the lockfile. Installs missing deps and removes extras; can mutate the active
.venv.uv lock
Ask
Resolves dependencies and writes
uv.lock. Network access; pinned versions may change.uv venv
Ask
Creates a new virtual environment at
<path> (default .venv). Overwrites an existing venv at the same path.uv add
Ask
Adding dependency
uv remove
Ask
Removing dependency
uv tool
Ask
Manages uv-installed standalone tools: install, uninstall, upgrade, run. Modifies the user-level uv tool directory and binaries on PATH.
uv python
Ask
Manages uv-managed Python interpreters: install, uninstall, pin, find. Downloads interpreter builds and writes to the user-level uv data dir.
uv cache
Ask
Mutates the uv cache (clean, prune).
uv cache clean deletes all cached wheels and source distributions.uv init
Ask
Initializes a new uv project in the current directory by writing
pyproject.toml and supporting files.uv build
Ask
Builds source and wheel distributions into
dist/. Writes artifacts; does not publish.uv publish
Ask
Publishes the package to its registry. Public publish is irreversible: the version number cannot be reused.
uv pip install
Ask
Installs packages into the currently active venv via uv's pip-compatible frontend. Writes to site-packages of
<venv>.uv pip uninstall
Ask
Removes packages from the currently active venv via uv's pip-compatible frontend.
yarn config set delete
Ask
Modifying yarn config
yarn run
Ask
Running script from package.json
yarn start
Ask
Running start script
yarn exec
Ask
Runs an arbitrary command through the package manager (downloads the package if missing). Same trust boundary as
curl | bash for untrusted packages.yarn install
Ask
Installing packages
yarn add
Ask
Adding packages
yarn remove
Ask
Removing packages
yarn upgrade
Ask
Upgrading packages
yarn upgrade-interactive
Ask
Upgrading packages
yarn link
Ask
Creates a global symlink and links the package into node_modules. Modifies the user-level yarn link registry; can shadow real installs of
<package>.yarn unlink
Ask
Removes the global symlink created by
yarn link. Affects every project that consumed the linked package.yarn publish
Ask
Publishes the package to its registry. Public publish is irreversible: the version number cannot be reused.
yarn init
Ask
Initializes a new package in the current directory by writing
package.json.yarn create
Ask
Runs a
create-<name> package to scaffold a project, downloading it if missing. Same trust boundary as curl | bash for untrusted initializers.yarn dlx
Ask
Runs an arbitrary command through the package manager (downloads the package if missing). Same trust boundary as
curl | bash for untrusted packages.yarn cache
Ask
Mutates the yarn cache (clean, list).
yarn cache clean deletes all cached package tarballs.yarn global
Ask
Operates on the user-global install location: add, remove, upgrade, bin, list. Modifies binaries on PATH for the current user.
yarn set
Ask
Sets a yarn config key. Affects the project's
.yarnrc.yml (Berry) or the user-level .yarnrc (Classic).
Custom handlers per package manager. Each program has a small Rust handler (check_npm, check_pnpm, check_yarn, check_pip, check_uv, check_poetry, check_pipx, check_mise) that recognises devtool delegation (e.g. npm eslint routes to the devtools gate), bare invocations (yarn = install), and per-package-manager idioms like pip install --dry-run.