lv24-vigil (Python launcher)
A thin Python launcher for Vigil, a local-first security auditor for code.
Vigil itself is a Go binary distributed as a Node.js command-line tool published
on npm as lv24-vigil. This package
does not reimplement Vigil and does not bundle Node.js: the vigil command
delegates to the npm package through npx.
The npm package remains the canonical distribution. The PyPI package only contains this launcher.
Prerequisites
- Node.js 18 or newer, including npm and npx (nodejs.org).
- Network access on first run, or an npm cache that already contains the
requested package, because
npxmay download it. - Python 3.9 or newer.
Installation
pip install lv24-vigil
This installs two equivalent console scripts:
vigillv24-vigil
Usage
vigil version
vigil scan --no-llm
vigil status
All arguments are forwarded unchanged to the npm CLI. The child process inherits the terminal, environment and working directory, and its exit code is propagated. You can also run:
python -m lv24_vigil --help
If npx cannot be found, the launcher exits with code 127 and prints an
installation hint. An interrupted run exits with code 130.
Version pinning
By default the launcher runs the npm package version matching its own version
(currently 0.4.0). Override it with VIGIL_NPM_VERSION to use any npm version
or tag:
VIGIL_NPM_VERSION=latest vigil --help
VIGIL_NPM_VERSION=0.4.0 vigil scan --no-llm
PowerShell:
$env:VIGIL_NPM_VERSION = "latest"; vigil --help
Links
- Main repository and documentation: https://github.com/LevapVeeskela/lv24-vigil
- Installation options: https://github.com/LevapVeeskela/lv24-vigil/blob/main/docs/install.md
- PyPI publishing and Trusted Publishing: https://github.com/LevapVeeskela/lv24-vigil/blob/main/docs/pypi.md
- Issues: https://github.com/LevapVeeskela/lv24-vigil/issues
- npm package: https://www.npmjs.com/package/lv24-vigil
License
Apache-2.0, same as the Vigil repository and the canonical npm package.
1 maintainer
Metadata
1 maintainer
Release files for lv24-vigil 0.4.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| lv24_vigil-0.4.0.tar.gz | 9.1 kB | With provenance | Details for lv24_vigil-0.4.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| lv24_vigil-0.4.0-py3-none-any.whl | Python 3 | none | any | Details for lv24_vigil-0.4.0-py3-none-any.whl |
Total release size: 17.3 kB
Release files / lv24_vigil-0.4.0.tar.gz
| Download URL | lv24_vigil-0.4.0.tar.gz |
|---|---|
| Size | 9.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
3eb44cd5f5307237607839bdbf81005607eb978014dacdd50b1abed289c10bde
|
|
BLAKE2b-256 checksum How to use checksums |
3bf42efcd400fbe45f598596349d0d43663d144de51ab55959f323d8416b6e42
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / lv24_vigil-0.4.0-py3-none-any.whl
| Download URL | lv24_vigil-0.4.0-py3-none-any.whl |
|---|---|
| Size | 8.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
c86c388a507a5183a3c0e45c1accb680b64a3c437b7c69a64857e7fe11fb1316
|
|
BLAKE2b-256 checksum How to use checksums |
fd31069a07160fc989301d27a3dbbe53660ab45010068cfe0a2c04c2f823208e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logSecurity for lv24-vigil 0.4.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
Both files in this release have been uploaded with provenance metadata.
Attestation for lv24_vigil-0.4.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
