Demo

Search, inspect, plan, receipt.

One package path shows how humans and agents use the same archive without trusting package text first.

Archive packages

verified

Demo trust level

100

Demo trust score

Path

Run it from any workspace

Every step has a CLI form and the same flow is exposed through MCP for Codex, Claude Code, OpenCode and Hermes.

Find a package from the same public archive an agent reads.

nipmod search gitlawb-repo-reader --online --json

View

Read package metadata, source and suggested next actions.

nipmod view gitlawb-repo-reader --json

Inspect

Check digest, signer, source, transparency and permissions.

nipmod inspect pkg:did:key:z6MkqDAkKNtWH69ZYoFitErk1CCKofFP5AaFjVXy5bVQ4fbD/gitlawb-repo-reader@0.1.0 --json

Plan

Create the install plan before the lockfile changes.

nipmod install --plan pkg:did:key:z6MkqDAkKNtWH69ZYoFitErk1CCKofFP5AaFjVXy5bVQ4fbD/gitlawb-repo-reader@0.1.0 --json

Install

Install only after review. Nipmod writes a local install receipt.

mkdir -p nipmod-demo
cd nipmod-demo
nipmod install gitlawb-repo-reader
ls .nipmod/receipts

Audit

Check the workspace against current trust and advisory data.

nipmod audit --online
nipmod sbom --json

Agent

Use this after `nipmod setup codex` or `nipmod setup claude`.

Use Nipmod to find gitlawb-repo-reader, inspect it, create an install plan, and install only after I approve the lockfile write.