@pnpm/fetching.binary-fetcher 1003.0.0

A fetcher for binary archives

@pnpm/fetching.binary-fetcher@1003.0.0 was published on 2025-11-27. Its manifest declares 7 runtime dependencies and 1 peer requirement. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=18.12.

All @pnpm/fetching.binary-fetcher versions · Permanent reference to 1003.0.0 · Latest release

Package specifications

Version	1003.0.0
License declaration	MIT
Published	2025-11-27T14:26:42.816Z
Node.js requirement	>=18.12
Type declarations	Bundled declarations
Runtime dependency count	7
Peer requirement count	1
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	11.25 KiB
Published file count	6
Package type	commonjs
ES module entry	Not declared
Default entry	lib/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	71
Repository stars	36888
Repository forks	1957

Install @pnpm/fetching.binary-fetcher 1003.0.0

npm install @pnpm/fetching.binary-fetcher@1003.0.0
pnpm add @pnpm/fetching.binary-fetcher@1003.0.0
yarn add @pnpm/fetching.binary-fetcher@1003.0.0

Runtime dependencies

ssri 10.0.5
tempy ^1.0.1
adm-zip ^0.5.16
@pnpm/error 1000.0.5
rename-overwrite ^6.0.2
@pnpm/fetcher-base 1001.0.5
@pnpm/fetching-types 1000.2.0

Peer requirements

@pnpm/worker ^1000.4.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@nodelib/fs.scandir@2.1.5 — indirect
@nodelib/fs.stat@2.0.5 — indirect
@nodelib/fs.walk@1.2.8 — indirect
@pnpm/constants@1001.3.1 — indirect
@pnpm/error@1000.0.5 — direct
@pnpm/fetcher-base@1001.0.5 — direct
@pnpm/fetching-types@1000.2.0 — direct
@pnpm/node-fetch@1.0.0 — indirect
@pnpm/resolver-base@1005.3.1 — indirect
@pnpm/types@1001.0.1 — indirect
@types/node@26.6.5 — indirect
@types/ssri@7.1.5 — indirect
@zkochan/retry@0.2.0 — indirect
@zkochan/rimraf@3.0.2 — indirect
adm-zip@0.5.18 — direct
aggregate-error@3.1.0 — indirect
array-union@2.1.0 — indirect
balanced-match@1.0.2 — indirect
brace-expansion@1.1.21 — indirect
braces@3.0.3 — indirect
clean-stack@2.2.0 — indirect
concat-map@0.0.1 — indirect
crypto-random-string@2.0.0 — indirect
data-uri-to-buffer@3.0.1 — indirect
del@6.1.1 — indirect
dir-glob@3.0.1 — indirect
fast-glob@3.3.3 — indirect
fastq@1.20.3 — indirect
fetch-blob@2.1.2 — indirect
fill-range@7.1.1 — indirect
fs-extra@11.3.0 — indirect
fs.realpath@1.0.0 — indirect
glob@7.2.3 — indirect
glob-parent@5.1.2 — indirect
globby@11.1.0 — indirect
graceful-fs@4.2.11 — indirect
ignore@5.3.2 — indirect
indent-string@4.0.0 — indirect
inflight@1.0.6 — indirect
inherits@2.0.4 — indirect
is-extglob@2.1.1 — indirect
is-glob@4.0.3 — indirect
is-number@7.0.0 — indirect
is-path-cwd@2.2.0 — indirect
is-path-inside@3.0.3 — indirect
is-stream@2.0.1 — indirect
jsonfile@6.2.1 — indirect
merge2@1.4.1 — indirect
micromatch@4.0.8 — indirect
minimatch@3.1.5 — indirect
minipass@7.1.3 — indirect
once@1.4.0 — indirect
p-map@4.0.0 — indirect
path-is-absolute@1.0.1 — indirect
path-type@4.0.0 — indirect
picomatch@2.3.2 — indirect
queue-microtask@1.2.3 — indirect
rename-overwrite@6.0.6 — direct
reusify@1.1.0 — indirect
rimraf@3.0.2 — indirect
run-parallel@1.2.0 — indirect
slash@3.0.0 — indirect
ssri@10.0.5 — direct
temp-dir@2.0.0 — indirect
tempy@1.0.1 — direct
to-regex-range@5.0.1 — indirect
type-fest@0.16.0 — indirect
undici-types@8.9.0 — indirect
unique-string@2.0.0 — indirect
universalify@2.0.1 — indirect
wrappy@1.0.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	9/10 — Found 27/30 approved changesets -- score normalized to 9
Maintained	10/10 — 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	10/10 — security policy file detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
License	10/10 — license file detected
Binary-Artifacts	10/10 — no binaries found in the repo
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Pinned-Dependencies	9/10 — dependency not pinned by hash detected -- score normalized to 9
Signed-Releases	0/10 — Project has not signed or included provenance with any releases.
Packaging	10/10 — packaging workflow detected
Fuzzing	0/10 — project is not fuzzed
SAST	10/10 — SAST tool is run on all commits

Evidence and freshness

https://registry.npmjs.org/%40pnpm%2Ffetching.binary-fetcher/1003.0.0 — retrieved 2026-10-29T17:07:28.005Z
https://api.deps.dev/v3/projects/github.com%2Fpnpm%2Fpnpm — retrieved 2026-10-29T12:01:18.702Z
https://api.deps.dev/v3/systems/npm/packages/%40pnpm%2Ffetching.binary-fetcher/versions/1003.0.0 — retrieved 2026-10-29T17:07:28.510Z
https://api.deps.dev/v3/systems/npm/packages/%40pnpm%2Ffetching.binary-fetcher/versions/1003.0.0:dependencies — retrieved 2026-10-29T17:07:28.551Z