@auto-it/core 7.8.1-canary.597.7685.0

Node API for using auto.

@auto-it/core@7.8.1-canary.597.7685.0 was published on 2019-10-08. Its manifest declares 24 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

All @auto-it/core versions · Permanent reference to 7.8.1-canary.597.7685.0 · Latest release

Package specifications

Version	7.8.1-canary.597.7685.0
License declaration	Not declared
Published	2019-10-08T22:00:04.308Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	24
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	733.69 KiB
Published file count	99
Package type	Not declared
ES module entry	Not declared
Default entry	dist/auto.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	132
Repository stars	2500
Repository forks	224

Install @auto-it/core 7.8.1-canary.597.7685.0

npm install @auto-it/core@7.8.1-canary.597.7685.0
pnpm add @auto-it/core@7.8.1-canary.597.7685.0
yarn add @auto-it/core@7.8.1-canary.597.7685.0

Runtime dependencies

dedent ^0.7.0
dotenv ^8.0.0
env-ci ^4.1.1
gitlog ^3.1.2
semver ^6.0.0
signale ^1.4.0
tapable ^2.0.0-beta.2
enquirer ^2.3.0
url-join ^4.0.0
deepmerge ^4.0.0
import-cwd ^3.0.0
node-fetch 2.6.0
tinycolor2 ^1.4.1
await-to-js ^2.1.1
cosmiconfig 5.2.1
lodash.chunk ^4.2.0
@octokit/rest 16.32.0
@octokit/graphql ^4.0.0
https-proxy-agent ^3.0.0
typescript-memoize ^1.0.0-alpha.3
@octokit/plugin-retry ^2.2.0
@atomist/slack-messages ~1.1.0
@octokit/plugin-throttling ^2.6.0
@octokit/plugin-enterprise-compatibility ^1.1.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@atomist/slack-messages@1.1.1 — direct
@octokit/endpoint@6.0.12 — indirect
@octokit/graphql@4.8.0 — direct
@octokit/openapi-types@12.11.0 — indirect
@octokit/plugin-enterprise-compatibility@1.3.0 — direct
@octokit/plugin-retry@2.2.0 — direct
@octokit/plugin-throttling@2.7.1 — direct
@octokit/request@5.6.3 — indirect
@octokit/request-error@1.2.1 — indirect
@octokit/request-error@2.1.0 — indirect
@octokit/rest@16.32.0 — direct
@octokit/types@2.16.2 — indirect
@octokit/types@6.41.0 — indirect
@types/node@26.6.6 — indirect
agent-base@4.3.0 — indirect
ansi-colors@4.1.3 — indirect
ansi-regex@5.0.1 — indirect
ansi-styles@3.2.1 — indirect
argparse@1.0.10 — indirect
atob-lite@2.0.0 — indirect
await-to-js@2.1.1 — direct
before-after-hook@2.2.3 — indirect
bottleneck@2.19.5 — indirect
btoa-lite@1.0.0 — indirect
caller-callsite@2.0.0 — indirect
caller-path@2.0.0 — indirect
callsites@2.0.0 — indirect
chalk@2.4.2 — indirect
color-convert@1.9.3 — indirect
color-name@1.1.3 — indirect
cosmiconfig@5.2.1 — direct
cross-spawn@6.0.6 — indirect
cross-spawn@7.0.6 — indirect
debug@3.2.7 — indirect
debug@4.4.3 — indirect
dedent@0.7.0 — direct
deepmerge@4.3.1 — direct
deprecation@2.3.1 — indirect
dotenv@8.6.0 — direct
end-of-stream@1.4.5 — indirect
enquirer@2.4.1 — direct
env-ci@4.5.2 — direct
error-ex@1.3.4 — indirect
es6-promise@4.2.8 — indirect
es6-promisify@5.0.0 — indirect
escape-string-regexp@1.0.5 — indirect
esprima@4.0.1 — indirect
execa@1.0.0 — indirect
execa@3.4.0 — indirect
figures@2.0.0 — indirect
find-up@2.1.0 — indirect
get-stream@4.1.0 — indirect
get-stream@5.2.0 — indirect
gitlog@3.3.6 — direct
graceful-fs@4.2.11 — indirect
has-flag@3.0.0 — indirect
https-proxy-agent@3.0.1 — direct
human-signals@1.1.1 — indirect
import-cwd@3.0.0 — direct
import-fresh@2.0.0 — indirect
import-from@3.0.0 — indirect
is-arrayish@0.2.1 — indirect
is-directory@0.3.1 — indirect
is-plain-object@5.1.0 — indirect
is-stream@1.1.0 — indirect
is-stream@2.0.1 — indirect
isexe@2.0.0 — indirect
java-properties@1.0.2 — indirect
js-yaml@3.15.2 — indirect
json-parse-better-errors@1.0.2 — indirect
load-json-file@4.0.0 — indirect
locate-path@2.0.0 — indirect
lodash.chunk@4.2.0 — direct
lodash.get@4.4.2 — indirect
lodash.set@4.3.2 — indirect
lodash.uniq@4.5.0 — indirect
macos-release@2.5.1 — indirect
merge-stream@2.0.0 — indirect
mimic-fn@2.1.0 — indirect
ms@2.1.3 — indirect
nice-try@1.0.5 — indirect
node-fetch@2.6.0 — direct
node-fetch@2.7.0 — indirect
npm-run-path@2.0.2 — indirect
npm-run-path@4.0.1 — indirect
octokit-pagination-methods@1.1.0 — indirect
once@1.4.0 — indirect
onetime@5.1.2 — indirect
os-name@3.1.0 — indirect
p-finally@1.0.0 — indirect
p-finally@2.0.1 — indirect
p-limit@1.3.0 — indirect
p-locate@2.0.0 — indirect
p-try@1.0.0 — indirect
parse-json@4.0.0 — indirect
path-exists@3.0.0 — indirect
path-key@2.0.1 — indirect
path-key@3.1.1 — indirect
pify@3.0.0 — indirect
pkg-conf@2.1.0 — indirect
pump@3.0.4 — indirect
resolve-from@3.0.0 — indirect
resolve-from@5.0.0 — indirect
semver@5.7.2 — indirect
semver@6.3.1 — direct
shebang-command@1.2.0 — indirect
shebang-command@2.0.0 — indirect
shebang-regex@1.0.0 — indirect
shebang-regex@3.0.0 — indirect
signal-exit@3.0.7 — indirect
signale@1.4.0 — direct
sprintf-js@1.0.3 — indirect
strip-ansi@6.0.1 — indirect
strip-bom@3.0.0 — indirect
strip-eof@1.0.0 — indirect
strip-final-newline@2.0.0 — indirect
supports-color@5.5.0 — indirect
tapable@2.3.3 — direct
tinycolor2@1.6.0 — direct
tr46@0.0.3 — indirect
tslib@1.14.1 — indirect
typescript-memoize@1.1.1 — direct
undici-types@8.9.0 — indirect
universal-user-agent@4.0.1 — indirect
universal-user-agent@6.0.1 — indirect
url-join@4.0.1 — direct
webidl-conversions@3.0.1 — indirect
whatwg-url@5.0.0 — indirect
which@1.3.1 — indirect
which@2.0.2 — indirect
windows-release@3.3.3 — indirect
wrappy@1.0.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	8/10 — Found 5/6 approved changesets -- score normalized to 8
Maintained	2/10 — 2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
License	10/10 — license file detected
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
Fuzzing	0/10 — project is not fuzzed
Signed-Releases	0/10 — Project has not signed or included provenance with any releases.
Security-Policy	0/10 — security policy file not detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/%40auto-it%2Fcore/7.8.1-canary.597.7685.0 — retrieved 2026-10-31T14:25:49.132Z
https://api.deps.dev/v3/systems/npm/packages/%40auto-it%2Fcore/versions/7.8.1-canary.597.7685.0 — retrieved 2026-10-31T14:25:49.576Z
https://api.deps.dev/v3/systems/npm/packages/%40auto-it%2Fcore/versions/7.8.1-canary.597.7685.0:dependencies — retrieved 2026-10-31T14:25:49.604Z
https://api.deps.dev/v3/projects/github.com%2Fintuit%2Fauto — retrieved 2026-10-31T14:25:50.240Z