{"repo":"NousResearch/hermes-agent","public_id":"35448","display_label":"Make npm/Node package manager command configurable","summary":"These items propose adding configuration support to specify a custom npm or Node package manager command, motivated in part by supply-chain security concerns. The feature would be exposed via config settings such as a config.yaml option.","subsystem":"agent/lsp","counts":{"members":5,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":3},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":115728},"resolution":{"state":"resolved","by":"pr-115728"},"freshness":{"state":"verified","last_verified_at":"2026-09-19T08:55:29+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.4},"fix_edges":[{"issue_number":35448,"pr_number":115728,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true}],"members":[{"kind":"issue","number":35448,"title":"feat(lsp): make npm command configurable for supply-chain security","url":null,"state":"closed"},{"kind":"pr","number":35475,"title":"feat(lsp): make npm command configurable for supply-chain security","url":null,"state":"closed","close_reason":{"category":"wontfix_bydesign","implication":"wontfix"},"merged":false},{"kind":"pr","number":63925,"title":"feat(lsp): configurable npm command via config.yaml for supply-chain security","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"06e76129cd6","number":0},{"kind":"pr","value":"#115728","number":115728}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":70001,"title":"feat(lsp): configure Node package manager","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"06e76129cd6","number":0},{"kind":"pr","value":"#115728","number":115728}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":115728,"title":"feat(lsp): lsp.package_manager selects npm, pnpm or yarn for language-server installs (#35448, salvage #70001)","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/lsp/install.py","hermes_cli/config_defaults.py","tests/agent/lsp/test_install_and_lint_fixes.py","website/docs/user-guide/features/lsp.md"]}],"trust":{"default_tier":"verified","includes_suggested":false}}