@lerna/legacy-package-management

Legacy package management concerns provided by lerna. Please migrate to use npm/yarn/pnpm workspaces instead.

@lerna/legacy-package-management@8.2.4 was published on 2025-07-27. Its manifest declares 67 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=18.0.0.

Deprecated: In v9 of lerna, released in September 2025, the `lerna bootstrap`, `lerna add` and `lerna link` commands were finally fully removed after over 2 years of being deprecated. If you are still using these commands, please migrate to using your package manager's long-supported `workspaces` feature. You may find https://lerna.js.org/docs/legacy-package-management useful for this transition.

All @lerna/legacy-package-management versions · Permanent reference to 8.2.4

Package specifications

Version	8.2.4
License declaration	MIT
Published	2025-07-27T18:10:21.538Z
Node.js requirement	>=18.0.0
Type declarations	Not declared
Runtime dependency count	67
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	321.07 KiB
Published file count	95
Package type	Not declared
ES module entry	Not declared
Default entry	./dist/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	528
Repository stars	36037
Repository forks	2264

Install @lerna/legacy-package-management 8.2.4

npm install @lerna/legacy-package-management@8.2.4
pnpm add @lerna/legacy-package-management@8.2.4
yarn add @lerna/legacy-package-management@8.2.4

Runtime dependencies

ini ^1.3.8
tar 6.2.1
pify 5.0.0
ssri ^10.0.6
uuid ^10.0.0
chalk 4.1.0
execa 5.0.0
is-ci 3.0.1
p-map 4.0.0
slash 3.0.0
tempy 1.0.0
upath 2.0.1
yargs 17.7.2
aproba 2.0.0
dedent 1.5.3
pacote ^18.0.6
rimraf ^4.4.1
semver 7.5.2
find-up 5.0.0
p-queue 6.6.2
through 2.3.8
cmd-shim 6.0.3
file-url 3.0.0
fs-extra ^11.2.0
get-port 5.1.1
inquirer 8.2.4
make-dir 4.0.0
temp-dir 1.0.0
byte-size 8.1.1
columnify 1.6.0
is-stream 2.0.0
minimatch 3.0.5
write-pkg 4.0.0
@nx/devkit >=17.1.2 < 21
clone-deep 4.0.1
get-stream 6.0.0
multimatch 5.0.0
node-fetch 2.6.7
tinyglobby 0.2.12
wide-align 1.1.5
cosmiconfig 9.0.0
glob-parent 6.0.2
graceful-fs 4.2.11
has-unicode 2.0.1
p-waterfall 2.1.1
signal-exit 3.0.7
npm-packlist 8.0.2
p-map-series 2.1.0
resolve-from 5.0.0
set-blocking ^2.0.0
string-width ^4.2.3
@octokit/rest 20.1.2
color-support 1.1.3
git-url-parse 14.0.0
libnpmpublish 9.0.9
pretty-format 29.4.3
read-cmd-shim 4.0.0
load-json-file 6.2.0
npm-package-arg 11.0.2
@npmcli/arborist 7.5.4
write-file-atomic 5.0.1
@npmcli/run-script 8.1.0
npm-registry-fetch ^17.1.0
@npmcli/package-json 5.2.0
console-control-strings ^1.1.0
conventional-changelog-core 5.0.1
conventional-recommended-bump 7.0.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@npmcli/arborist@7.5.4 — direct
@npmcli/package-json@5.2.0 — direct
@npmcli/run-script@8.1.0 — direct
@nx/devkit@20.8.4 — direct
@octokit/rest@20.1.2 — direct
aproba@2.0.0 — direct
byte-size@8.1.1 — direct
chalk@4.1.0 — direct
clone-deep@4.0.1 — direct
cmd-shim@6.0.3 — direct
color-support@1.1.3 — direct
columnify@1.6.0 — direct
console-control-strings@1.1.0 — direct
conventional-changelog-core@5.0.1 — direct
conventional-recommended-bump@7.0.1 — direct
cosmiconfig@9.0.0 — direct
dedent@1.5.3 — direct
execa@5.0.0 — direct
file-url@3.0.0 — direct
find-up@5.0.0 — direct
fs-extra@11.4.1 — direct
get-port@5.1.1 — direct
get-stream@6.0.0 — direct
git-url-parse@14.0.0 — direct
glob-parent@6.0.2 — direct
graceful-fs@4.2.11 — direct
has-unicode@2.0.1 — direct
ini@1.3.8 — direct
inquirer@8.2.4 — direct
is-ci@3.0.1 — direct
is-stream@2.0.0 — direct
libnpmpublish@9.0.9 — direct
load-json-file@6.2.0 — direct
make-dir@4.0.0 — direct
minimatch@3.0.5 — direct
multimatch@5.0.0 — direct
node-fetch@2.6.7 — direct
npm-package-arg@11.0.2 — direct
npm-packlist@8.0.2 — direct
npm-registry-fetch@17.1.0 — direct
p-map@4.0.0 — direct
p-map-series@2.1.0 — direct
p-queue@6.6.2 — direct
p-waterfall@2.1.1 — direct
pacote@18.0.6 — direct
pify@5.0.0 — direct
pretty-format@29.4.3 — direct
read-cmd-shim@4.0.0 — direct
resolve-from@5.0.0 — direct
rimraf@4.4.1 — direct
semver@7.5.2 — direct
set-blocking@2.0.0 — direct
signal-exit@3.0.7 — direct
slash@3.0.0 — direct
ssri@10.0.6 — direct
string-width@4.2.3 — direct
tar@6.2.1 — direct
temp-dir@1.0.0 — direct
tempy@1.0.0 — direct
through@2.3.8 — direct
tinyglobby@0.2.12 — direct
upath@2.0.1 — direct
uuid@10.0.0 — direct
wide-align@1.1.5 — direct
write-file-atomic@5.0.1 — direct
write-pkg@4.0.0 — direct
yargs@17.7.2 — direct
@isaacs/string-locale-compare@1.1.0 — indirect
@npmcli/fs@3.1.1 — indirect
@npmcli/installed-package-contents@2.1.0 — indirect
@npmcli/map-workspaces@3.0.6 — indirect
@npmcli/metavuln-calculator@7.1.1 — indirect
@npmcli/name-from-folder@2.0.0 — indirect
@npmcli/node-gyp@3.0.0 — indirect
@npmcli/query@3.1.0 — indirect
@npmcli/redact@2.0.1 — indirect
bin-links@4.0.4 — indirect
cacache@18.0.4 — indirect
common-ancestor-path@1.0.1 — indirect
hosted-git-info@7.0.2 — indirect
json-parse-even-better-errors@3.0.2 — indirect
json-stringify-nice@1.1.4 — indirect
lru-cache@10.4.3 — indirect
minimatch@9.0.9 — indirect
nopt@7.2.1 — indirect
npm-install-checks@6.3.0 — indirect
npm-pick-manifest@9.1.0 — indirect
parse-conflict-json@3.0.1 — indirect
proc-log@4.2.0 — indirect
proggy@2.0.0 — indirect
promise-all-reject-late@1.0.1 — indirect
promise-call-limit@3.0.2 — indirect
read-package-json-fast@3.0.2 — indirect
treeverse@3.0.0 — indirect
walk-up-path@3.0.1 — indirect
@npmcli/git@5.0.8 — indirect
glob@10.5.0 — indirect
normalize-package-data@6.0.2 — indirect
semver@7.8.5 — indirect
@npmcli/promise-spawn@7.0.2 — indirect
node-gyp@10.3.1 — indirect
which@4.0.0 — indirect
ejs@3.1.10 — indirect
enquirer@2.3.6 — indirect
ignore@5.3.2 — indirect
minimatch@9.0.3 — indirect
semver@7.8.5 — indirect
tmp@0.2.7 — indirect
tslib@2.8.1 — indirect
yargs-parser@21.1.1 — indirect
@octokit/core@5.2.2 — indirect
@octokit/plugin-paginate-rest@11.4.4-cjs.2 — indirect
@octokit/plugin-request-log@4.0.1 — indirect
@octokit/plugin-rest-endpoint-methods@13.3.2-cjs.1 — indirect
ansi-styles@4.3.0 — indirect
supports-color@7.2.0 — indirect
is-plain-object@2.0.4 — indirect
kind-of@6.0.3 — indirect
shallow-clone@3.0.1 — indirect
strip-ansi@6.0.1 — indirect
wcwidth@1.0.1 — indirect
add-stream@1.0.0 — indirect
conventional-changelog-writer@6.0.1 — indirect
conventional-commits-parser@4.0.0 — indirect
dateformat@3.0.3 — indirect
get-pkg-repo@4.2.1 — indirect
git-raw-commits@3.0.0 — indirect
git-remote-origin-url@2.0.0 — indirect
git-semver-tags@5.0.1 — indirect
normalize-package-data@3.0.3 — indirect
read-pkg@3.0.0 — indirect
read-pkg-up@3.0.0 — indirect
concat-stream@2.0.0 — indirect
conventional-changelog-preset-loader@3.0.0 — indirect
conventional-commits-filter@3.0.0 — indirect
meow@8.1.2 — indirect
env-paths@2.2.1 — indirect
import-fresh@3.3.1 — indirect
js-yaml@4.3.2 — indirect
parse-json@5.2.0 — indirect
cross-spawn@7.0.6 — indirect
human-signals@2.1.0 — indirect
merge-stream@2.0.0 — indirect
npm-run-path@4.0.1 — indirect
onetime@5.1.2 — indirect
strip-final-newline@2.0.0 — indirect
locate-path@6.0.0 — indirect
path-exists@4.0.0 — indirect
jsonfile@6.2.1 — indirect
universalify@2.0.1 — indirect
git-up@7.0.0 — indirect
is-glob@4.0.3 — indirect
ansi-escapes@4.3.2 — indirect
chalk@4.1.2 — indirect
cli-cursor@3.1.0 — indirect
cli-width@3.0.0 — indirect
external-editor@3.1.0 — indirect
figures@3.2.0 — indirect
lodash@4.18.1 — indirect
mute-stream@0.0.8 — indirect
ora@5.4.1 — indirect
run-async@2.4.1 — indirect
rxjs@7.8.2 — indirect
strip-ansi@6.0.1 — indirect
wrap-ansi@7.0.0 — indirect
ci-info@3.9.0 — indirect
ci-info@4.4.0 — indirect
sigstore@2.3.1 — indirect
strip-bom@4.0.0 — indirect
type-fest@0.6.0 — indirect
semver@7.8.5 — indirect
brace-expansion@1.1.21 — indirect
@types/minimatch@3.0.5 — indirect
array-differ@3.0.0 — indirect
array-union@2.1.0 — indirect
arrify@2.0.1 — indirect
whatwg-url@5.0.0 — indirect
validate-npm-package-name@5.0.1 — indirect
ignore-walk@6.0.5 — indirect
jsonparse@1.3.1 — indirect
make-fetch-happen@13.0.1 — indirect
minipass@7.1.3 — indirect
minipass-fetch@3.0.5 — indirect
minizlib@2.1.2 — indirect
aggregate-error@3.1.0 — indirect
eventemitter3@4.0.7 — indirect
p-timeout@3.2.0 — indirect
p-reduce@2.1.0 — indirect
fs-minipass@3.0.3 — indirect
promise-retry@2.0.1 — indirect
@jest/schemas@29.6.3 — indirect
ansi-styles@5.2.0 — indirect
react-is@18.3.1 — indirect
glob@9.3.5 — indirect
lru-cache@6.0.0 — indirect
emoji-regex@8.0.0 — indirect
is-fullwidth-code-point@3.0.0 — indirect
strip-ansi@6.0.1 — indirect
chownr@2.0.0 — indirect
fs-minipass@2.1.0 — indirect
minipass@5.0.0 — indirect
mkdirp@1.0.4 — indirect
yallist@4.0.0 — indirect
del@6.1.1 — indirect
temp-dir@2.0.0 — indirect
type-fest@0.16.0 — indirect
unique-string@2.0.0 — indirect
fdir@6.5.0 — indirect
picomatch@4.0.7 — indirect
imurmurhash@0.1.4 — indirect
signal-exit@4.1.0 — indirect
sort-keys@2.0.0 — indirect
type-fest@0.4.1 — indirect
write-json-file@3.2.0 — indirect
cliui@8.0.1 — indirect
escalade@3.2.0 — indirect
get-caller-file@2.0.5 — indirect
require-directory@2.1.1 — indirect
y18n@5.0.8 — indirect
npm-bundled@3.0.1 — indirect
npm-normalize-package-bin@3.0.1 — indirect
minimatch@9.0.9 — indirect
postcss-selector-parser@6.1.5 — indirect
minipass-collect@2.0.1 — indirect
minipass-flush@1.0.7 — indirect
minipass-pipeline@1.2.4 — indirect
unique-filename@3.0.0 — indirect
brace-expansion@2.1.7 — indirect
abbrev@2.0.0 — indirect
just-diff@6.0.2 — indirect
just-diff-apply@5.5.0 — indirect
ini@4.1.3 — indirect
promise-inflight@1.0.1 — indirect
which@4.0.0 — indirect
foreground-child@3.3.1 — indirect
jackspeak@3.4.3 — indirect
minimatch@9.0.9 — indirect
package-json-from-dist@1.0.1 — indirect
path-scurry@1.11.1 — indirect
validate-npm-package-license@3.0.4 — indirect
which@4.0.0 — indirect
exponential-backoff@3.1.3 — indirect
which@4.0.0 — indirect
isexe@3.1.5 — indirect
jake@10.9.4 — indirect
ansi-colors@4.1.3 — indirect
@octokit/auth-token@4.0.0 — indirect
@octokit/graphql@7.1.1 — indirect
@octokit/request@8.4.1 — indirect
@octokit/request-error@5.1.1 — indirect
@octokit/types@13.10.0 — indirect
before-after-hook@2.2.3 — indirect
universal-user-agent@6.0.1 — indirect
color-convert@2.0.1 — indirect
has-flag@4.0.0 — indirect
isobject@3.0.1 — indirect
ansi-regex@5.0.1 — indirect
defaults@1.0.4 — indirect
handlebars@4.7.10 — indirect
json-stringify-safe@5.0.1 — indirect
split@1.0.1 — indirect
JSONStream@1.3.5 — indirect
is-text-path@1.0.1 — indirect
split2@3.2.2 — indirect
@hutson/parse-repository-url@3.0.2 — indirect
hosted-git-info@4.1.0 — indirect
through2@2.0.5 — indirect
yargs@16.2.2 — indirect
dargs@7.0.0 — indirect
gitconfiglocal@1.0.0 — indirect
pify@2.3.0 — indirect
hosted-git-info@4.1.0 — indirect
is-core-module@2.17.0 — indirect
load-json-file@4.0.0 — indirect
normalize-package-data@2.5.0 — indirect
path-type@3.0.0 — indirect
find-up@2.1.0 — indirect
buffer-from@1.1.2 — indirect
inherits@2.0.4 — indirect
readable-stream@3.6.2 — indirect
typedarray@0.0.6 — indirect
lodash.ismatch@4.4.0 — indirect
modify-values@1.0.1 — indirect
@types/minimist@1.2.5 — indirect
camelcase-keys@6.2.2 — indirect
decamelize-keys@1.1.1 — indirect
hard-rejection@2.1.0 — indirect
minimist-options@4.1.0 — indirect
normalize-package-data@3.0.3 — indirect
read-pkg-up@7.0.1 — indirect
redent@3.0.0 — indirect
trim-newlines@3.0.1 — indirect
type-fest@0.18.1 — indirect
yargs-parser@20.2.9 — indirect
parent-module@1.0.1 — indirect
resolve-from@4.0.0 — indirect
argparse@2.0.1 — indirect
@babel/code-frame@7.29.7 — indirect
error-ex@1.3.4 — indirect
json-parse-even-better-errors@2.3.1 — indirect
lines-and-columns@1.2.4 — indirect
path-key@3.1.1 — indirect
shebang-command@2.0.0 — indirect
which@2.0.2 — indirect
mimic-fn@2.1.0 — indirect
p-locate@5.0.0 — indirect
is-ssh@1.4.1 — indirect
parse-url@8.1.0 — indirect
is-extglob@2.1.1 — indirect
type-fest@0.21.3 — indirect
ansi-styles@4.3.0 — indirect
restore-cursor@3.1.0 — indirect
chardet@0.7.0 — indirect
iconv-lite@0.4.24 — indirect
tmp@0.0.33 — indirect
escape-string-regexp@1.0.5 — indirect
bl@4.1.0 — indirect
cli-spinners@2.9.2 — indirect
is-interactive@1.0.0 — indirect
is-unicode-supported@0.1.0 — indirect
log-symbols@4.1.0 — indirect
strip-ansi@6.0.1 — indirect
ansi-regex@5.0.1 — indirect
@sigstore/bundle@2.3.2 — indirect
@sigstore/core@1.1.0 — indirect
@sigstore/protobuf-specs@0.3.3 — indirect
@sigstore/sign@2.3.2 — indirect
@sigstore/tuf@2.3.4 — indirect
@sigstore/verify@1.2.1 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
tr46@0.0.3 — indirect
webidl-conversions@3.0.1 — indirect
minimatch@9.0.9 — indirect
@npmcli/agent@2.2.2 — indirect
http-cache-semantics@4.3.0 — indirect
is-lambda@1.0.1 — indirect
negotiator@0.6.4 — indirect
encoding@0.1.14 — indirect
minipass-sized@1.0.3 — indirect
minipass@3.3.6 — indirect
clean-stack@2.2.0 — indirect
indent-string@4.0.0 — indirect
p-finally@1.0.0 — indirect
err-code@2.0.3 — indirect
retry@0.12.0 — indirect
@sinclair/typebox@0.27.12 — indirect
fs.realpath@1.0.0 — indirect
minimatch@8.0.7 — indirect
minipass@4.2.8 — indirect
ansi-regex@5.0.1 — indirect
minipass@3.3.6 — indirect
globby@11.1.0 — indirect
is-path-cwd@2.2.0 — indirect
is-path-inside@3.0.3 — indirect
rimraf@3.0.2 — indirect
crypto-random-string@2.0.0 — indirect
is-plain-obj@1.1.0 — indirect
detect-indent@5.0.0 — indirect
make-dir@2.1.0 — indirect
pify@4.0.1 — indirect
write-file-atomic@2.4.3 — indirect
strip-ansi@6.0.1 — indirect
wrap-ansi@7.0.0 — indirect
cssesc@3.0.0 — indirect
util-deprecate@1.0.2 — indirect
minipass@3.3.6 — indirect
minipass@3.3.6 — indirect
unique-slug@4.0.0 — indirect
isexe@3.1.5 — indirect
signal-exit@4.1.0 — indirect
@isaacs/cliui@8.0.2 — indirect
@pkgjs/parseargs@0.11.0 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
isexe@3.1.5 — indirect
isexe@3.1.5 — indirect
async@3.2.6 — indirect
filelist@1.0.6 — indirect
picocolors@1.1.1 — indirect
@octokit/endpoint@9.0.6 — indirect
deprecation@2.3.1 — indirect
once@1.4.0 — indirect
@octokit/openapi-types@24.2.0 — indirect
color-name@1.1.4 — indirect
clone@1.0.4 — indirect
minimist@1.2.8 — indirect
neo-async@2.6.2 — indirect
source-map@0.6.1 — indirect
uglify-js@3.19.3 — indirect
wordwrap@1.0.0 — indirect
text-extensions@1.9.0 — indirect
lru-cache@6.0.0 — indirect
readable-stream@2.3.8 — indirect
xtend@4.0.2 — indirect
cliui@7.0.4 — indirect
yargs-parser@20.2.9 — indirect
lru-cache@6.0.0 — indirect
hasown@2.0.4 — indirect
parse-json@4.0.0 — indirect
pify@3.0.0 — indirect
strip-bom@3.0.0 — indirect
hosted-git-info@2.8.9 — indirect
resolve@1.22.13 — indirect
semver@5.7.2 — indirect
pify@3.0.0 — indirect
locate-path@2.0.0 — indirect
string_decoder@1.3.0 — indirect
camelcase@5.3.1 — indirect
map-obj@4.3.0 — indirect
quick-lru@4.0.1 — indirect
decamelize@1.2.0 — indirect
map-obj@1.0.1 — indirect
arrify@1.0.1 — indirect
hosted-git-info@4.1.0 — indirect
find-up@4.1.0 — indirect
read-pkg@5.2.0 — indirect
type-fest@0.8.1 — indirect
strip-indent@3.0.0 — indirect
callsites@3.1.0 — indirect
@babel/helper-validator-identifier@7.29.7 — indirect
js-tokens@4.0.0 — indirect
is-arrayish@0.2.1 — indirect
shebang-regex@3.0.0 — indirect
isexe@2.0.0 — indirect
p-limit@3.1.0 — indirect
protocols@2.0.2 — indirect
parse-path@7.1.0 — indirect
safer-buffer@2.1.2 — indirect
os-tmpdir@1.0.2 — indirect
buffer@5.7.1 — indirect
ansi-regex@5.0.1 — indirect
tuf-js@2.2.1 — indirect
agent-base@7.1.4 — indirect
http-proxy-agent@7.0.2 — indirect
https-proxy-agent@7.0.6 — indirect
socks-proxy-agent@8.0.5 — indirect
iconv-lite@0.7.3 — indirect
minipass@3.3.6 — indirect
dir-glob@3.0.1 — indirect
fast-glob@3.3.3 — indirect
merge2@1.4.1 — indirect
glob@7.2.3 — indirect
semver@5.7.2 — indirect
ansi-regex@5.0.1 — indirect
ansi-styles@4.3.0 — indirect
string-width@4.2.3 — indirect
string-width@5.1.2 — indirect
strip-ansi@6.0.1 — indirect
strip-ansi@7.2.0 — indirect
wrap-ansi@7.0.0 — indirect
wrap-ansi@8.1.0 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
minimatch@5.1.9 — indirect
wrappy@1.0.2 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
strip-ansi@6.0.1 — indirect
wrap-ansi@7.0.0 — indirect
function-bind@1.1.2 — indirect
json-parse-better-errors@1.0.2 — indirect
es-errors@1.3.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
p-locate@2.0.0 — indirect
path-exists@3.0.0 — indirect
safe-buffer@5.2.1 — indirect
lru-cache@6.0.0 — indirect
locate-path@5.0.0 — indirect
@types/normalize-package-data@2.4.4 — indirect
normalize-package-data@2.5.0 — indirect
type-fest@0.6.0 — indirect
min-indent@1.0.1 — indirect
yocto-queue@0.1.0 — indirect
base64-js@1.5.1 — indirect
ieee754@1.2.1 — indirect
@tufjs/models@2.0.1 — indirect
debug@4.4.3 — indirect
socks@2.8.10 — indirect
path-type@4.0.0 — indirect
@nodelib/fs.stat@2.0.5 — indirect
@nodelib/fs.walk@1.2.8 — indirect
glob-parent@5.1.2 — indirect
micromatch@4.0.8 — indirect
inflight@1.0.6 — indirect
minimatch@3.1.5 — indirect
path-is-absolute@1.0.1 — indirect
emoji-regex@8.0.0 — indirect
strip-ansi@6.0.1 — indirect
eastasianwidth@0.2.0 — indirect
emoji-regex@9.2.2 — indirect
ansi-regex@5.0.1 — indirect
ansi-regex@6.4.0 — indirect
ansi-styles@4.3.0 — indirect
strip-ansi@6.0.1 — indirect
ansi-styles@6.2.3 — indirect
string-width@5.1.2 — indirect
ansi-regex@5.0.1 — indirect
ansi-styles@4.3.0 — indirect
p-limit@1.3.0 — indirect
p-locate@4.1.0 — indirect
hosted-git-info@2.8.9 — indirect
semver@5.7.2 — indirect
@tufjs/canonical-json@2.0.0 — indirect
minimatch@9.0.9 — indirect
ms@2.1.3 — indirect
ip-address@10.7.5 — indirect
smart-buffer@4.2.0 — indirect
@nodelib/fs.scandir@2.1.5 — indirect
fastq@1.20.3 — indirect
braces@3.0.3 — indirect
picomatch@2.3.2 — indirect
brace-expansion@1.1.21 — indirect
ansi-regex@5.0.1 — indirect
ansi-regex@5.0.1 — indirect
p-try@1.0.0 — indirect
p-limit@2.3.0 — indirect
run-parallel@1.2.0 — indirect
reusify@1.1.0 — indirect
fill-range@7.1.1 — indirect
p-try@2.2.0 — indirect
queue-microtask@1.2.3 — indirect
to-regex-range@5.0.1 — indirect
is-number@7.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	4/10 — Found 12/26 approved changesets -- score normalized to 4
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Maintained	10/10 — 29 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
Binary-Artifacts	10/10 — no binaries found in the repo
Security-Policy	0/10 — security policy file not detected
Pinned-Dependencies	8/10 — dependency not pinned by hash detected -- score normalized to 8
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
SAST	5/10 — SAST tool is not run on all commits -- score normalized to 5

Evidence and freshness

https://registry.npmjs.org/%40lerna%2Flegacy-package-management/8.2.4 — retrieved 2026-10-30T00:23:41.245Z
https://api.deps.dev/v3/projects/github.com%2Flerna%2Flerna — retrieved 2026-10-29T23:05:43.665Z
https://api.deps.dev/v3/systems/npm/packages/%40lerna%2Flegacy-package-management/versions/8.2.4 — retrieved 2026-10-30T00:23:41.778Z
https://api.deps.dev/v3/systems/npm/packages/%40lerna%2Flegacy-package-management/versions/8.2.4:dependencies — retrieved 2026-10-30T00:23:41.816Z