@sanity/cli-core

Sanity CLI core package

@sanity/cli-core@3.14.1 was published on 2026-10-30. Its manifest declares 19 runtime dependencies and 2 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=22.12.

All @sanity/cli-core versions · Permanent reference to 3.14.1 · View npm registry JSON

Package specifications

Version	3.14.1
License declaration	MIT
Published	2026-10-30T09:47:25.409Z
Node.js requirement	>=22.12
Type declarations	Bundled declarations
Runtime dependency count	19
Peer requirement count	2
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	679.47 KiB
Published file count	256
Package type	module
ES module entry	Not declared
Default entry	./dist/_exports/index.js
Side effects declaration	false
Direct advisories	0
Resolved graph dependencies	184
Repository stars	1
Repository forks	1

Install @sanity/cli-core 3.14.1

npm install @sanity/cli-core@3.14.1
pnpm add @sanity/cli-core@3.14.1
yarn add @sanity/cli-core@3.14.1

Runtime dependencies

ora ^9.0.0
zod ^4.5.2
jiti ^2.7.0
obug ^3.0.0
rxjs ^7.8.2
vite ^8.3.3
boxen ^8.0.1
jsdom ^29.1.1
get-it ^9.5.4
empathic ^2.0.1
wrap-ansi ^9.0.2
json-lexer ^1.2.0
@oclif/core ^4.11.14
log-symbols ^7.0.1
get-tsconfig ^4.14.3
@inquirer/core ^12.0.5
@sanity/client ^8.9.0
@inquirer/prompts ^8.7.4
import-meta-resolve ^4.2.0

Peer requirements

oxc-transform-react * (optional peer)
babel-plugin-react-compiler * (optional peer)

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@inquirer/core@12.0.6 — direct
@inquirer/prompts@8.7.5 — direct
@oclif/core@4.14.0 — direct
@sanity/client@8.14.1 — direct
boxen@8.0.1 — direct
empathic@2.1.0 — direct
get-it@9.6.2 — direct
get-tsconfig@4.14.3 — direct
import-meta-resolve@4.2.0 — direct
jiti@2.7.0 — direct
jsdom@29.1.1 — direct
json-lexer@1.2.0 — direct
log-symbols@7.0.1 — direct
obug@3.0.0 — direct
ora@9.4.1 — direct
rxjs@7.8.2 — direct
vite@8.3.5 — direct
wrap-ansi@9.0.2 — direct
zod@4.6.7 — direct
@inquirer/ansi@2.0.10 — indirect
@inquirer/figures@2.0.10 — indirect
@inquirer/type@4.2.1 — indirect
cli-width@4.1.0 — indirect
fast-wrap-ansi@0.2.2 — indirect
mute-stream@3.0.0 — indirect
signal-exit@4.1.0 — indirect
@inquirer/checkbox@5.2.8 — indirect
@inquirer/confirm@6.3.5 — indirect
@inquirer/editor@5.3.6 — indirect
@inquirer/expand@5.1.8 — indirect
@inquirer/input@5.1.9 — indirect
@inquirer/number@4.2.6 — indirect
@inquirer/password@5.2.5 — indirect
@inquirer/rawlist@5.3.8 — indirect
@inquirer/search@4.3.6 — indirect
@inquirer/select@5.2.8 — indirect
ansi-escapes@4.3.2 — indirect
ansis@3.17.0 — indirect
clean-stack@3.0.1 — indirect
cli-spinners@2.9.2 — indirect
debug@4.4.3 — indirect
ejs@6.0.1 — indirect
get-package-type@0.1.0 — indirect
indent-string@4.0.0 — indirect
lilconfig@3.1.4 — indirect
minimatch@10.2.6 — indirect
semver@7.8.5 — indirect
string-width@4.2.3 — indirect
supports-color@8.1.1 — indirect
tinyglobby@0.2.17 — indirect
widest-line@3.1.0 — indirect
wordwrap@1.0.0 — indirect
wrap-ansi@7.0.0 — indirect
wsl-utils@0.4.0 — indirect
eventsource@5.1.4 — indirect
ansi-align@3.0.1 — indirect
camelcase@8.0.0 — indirect
chalk@5.6.2 — indirect
cli-boxes@3.0.0 — indirect
string-width@7.2.0 — indirect
type-fest@4.41.0 — indirect
widest-line@5.0.0 — indirect
undici@7.30.1 — indirect
resolve-pkg-maps@1.0.0 — indirect
@asamuzakjp/css-color@5.1.11 — indirect
@asamuzakjp/dom-selector@7.1.1 — indirect
@bramus/specificity@2.4.3 — indirect
@csstools/css-syntax-patches-for-csstree@1.1.16 — indirect
@exodus/bytes@1.16.0 — indirect
css-tree@3.2.1 — indirect
data-urls@7.0.0 — indirect
decimal.js@10.6.0 — indirect
html-encoding-sniffer@6.0.0 — indirect
is-potential-custom-element-name@1.0.1 — indirect
lru-cache@11.5.3 — indirect
parse5@8.0.1 — indirect
saxes@6.0.0 — indirect
symbol-tree@3.2.4 — indirect
tough-cookie@6.0.2 — indirect
w3c-xmlserializer@5.0.0 — indirect
webidl-conversions@8.0.1 — indirect
whatwg-mimetype@5.0.0 — indirect
whatwg-url@16.0.1 — indirect
xml-name-validator@5.0.0 — indirect
is-unicode-supported@2.1.0 — indirect
yoctocolors@2.2.0 — indirect
cli-cursor@5.0.0 — indirect
cli-spinners@3.4.0 — indirect
is-interactive@2.0.0 — indirect
stdin-discarder@0.3.2 — indirect
string-width@8.3.0 — indirect
tslib@2.9.1 — indirect
fsevents@2.3.3 — indirect
lightningcss@1.33.0 — indirect
picomatch@4.0.7 — indirect
postcss@8.5.32 — indirect
rolldown@1.2.16 — indirect
ansi-styles@6.2.3 — indirect
string-width@7.2.0 — indirect
strip-ansi@7.2.0 — indirect
fast-string-width@3.0.2 — indirect
@inquirer/external-editor@3.0.7 — indirect
type-fest@0.21.3 — indirect
escape-string-regexp@4.0.0 — indirect
ms@2.1.3 — indirect
brace-expansion@5.0.12 — indirect
emoji-regex@8.0.0 — indirect
is-fullwidth-code-point@3.0.0 — indirect
strip-ansi@6.0.1 — indirect
has-flag@4.0.0 — indirect
fdir@6.5.0 — indirect
ansi-styles@4.3.0 — indirect
is-wsl@3.1.1 — indirect
powershell-utils@0.1.0 — indirect
eventsource-parser@4.1.3 — indirect
emoji-regex@10.6.0 — indirect
get-east-asian-width@1.7.0 — indirect
strip-ansi@7.2.0 — indirect
@asamuzakjp/generational-cache@1.0.1 — indirect
@csstools/css-calc@3.4.3 — indirect
@csstools/css-color-parser@4.2.7 — indirect
@csstools/css-parser-algorithms@4.0.2 — indirect
@csstools/css-tokenizer@4.0.2 — indirect
@asamuzakjp/nwsapi@2.3.9 — indirect
bidi-js@1.1.0 — indirect
mdn-data@2.27.1 — indirect
source-map-js@1.2.2 — indirect
entities@8.1.0 — indirect
xmlchars@2.2.0 — indirect
tldts@7.4.19 — indirect
tr46@6.0.0 — indirect
restore-cursor@5.1.0 — indirect
strip-ansi@7.2.0 — indirect
detect-libc@2.1.2 — indirect
lightningcss-android-arm64@1.33.0 — indirect
lightningcss-darwin-arm64@1.33.0 — indirect
lightningcss-darwin-x64@1.33.0 — indirect
lightningcss-freebsd-x64@1.33.0 — indirect
lightningcss-linux-arm-gnueabihf@1.33.0 — indirect
lightningcss-linux-arm64-gnu@1.33.0 — indirect
lightningcss-linux-arm64-musl@1.33.0 — indirect
lightningcss-linux-x64-gnu@1.33.0 — indirect
lightningcss-linux-x64-musl@1.33.0 — indirect
lightningcss-win32-arm64-msvc@1.33.0 — indirect
lightningcss-win32-x64-msvc@1.33.0 — indirect
nanoid@3.3.20 — indirect
picocolors@1.1.1 — indirect
@oxc-project/types@0.156.0 — indirect
@rolldown/binding-android-arm-eabi@1.2.16 — indirect
@rolldown/binding-android-arm64@1.2.16 — indirect
@rolldown/binding-darwin-arm64@1.2.16 — indirect
@rolldown/binding-darwin-x64@1.2.16 — indirect
@rolldown/binding-freebsd-x64@1.2.16 — indirect
@rolldown/binding-linux-arm-gnueabihf@1.2.16 — indirect
@rolldown/binding-linux-arm64-gnu@1.2.16 — indirect
@rolldown/binding-linux-arm64-musl@1.2.16 — indirect
@rolldown/binding-linux-ppc64-gnu@1.2.16 — indirect
@rolldown/binding-linux-s390x-gnu@1.2.16 — indirect
@rolldown/binding-linux-x64-gnu@1.2.16 — indirect
@rolldown/binding-linux-x64-musl@1.2.16 — indirect
@rolldown/binding-openharmony-arm64@1.2.16 — indirect
@rolldown/binding-win32-arm64-msvc@1.2.16 — indirect
@rolldown/binding-win32-x64-msvc@1.2.16 — indirect
@rolldown/pluginutils@1.0.1 — indirect
emoji-regex@10.6.0 — indirect
ansi-regex@6.5.0 — indirect
fast-string-truncated-width@3.0.3 — indirect
chardet@2.2.0 — indirect
iconv-lite@0.7.3 — indirect
balanced-match@4.0.4 — indirect
ansi-regex@5.0.1 — indirect
color-convert@2.0.1 — indirect
is-inside-container@1.0.0 — indirect
ansi-regex@6.5.0 — indirect
@csstools/color-helpers@6.1.2 — indirect
require-from-string@2.0.2 — indirect
tldts-core@7.4.20 — indirect
punycode@2.3.1 — indirect
onetime@7.0.0 — indirect
ansi-regex@6.5.0 — indirect
safer-buffer@2.1.2 — indirect
color-name@1.1.4 — indirect
is-docker@3.0.0 — indirect
mimic-function@5.0.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Code-Review	9/10 — Found 23/24 approved changesets -- score normalized to 9
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	0/10 — dangerous workflow patterns detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	5/10 — dependency not pinned by hash detected -- score normalized to 5
License	10/10 — license file detected
Branch-Protection	4/10 — branch protection is not maximal on development and all release branches
Security-Policy	10/10 — security policy file detected
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-01T11:23:54.052Z
https://api.deps.dev/v3/systems/npm/packages/%40sanity%2Fcli-core/versions/3.14.1 — retrieved 2026-11-01T11:23:54.457Z
https://api.deps.dev/v3/systems/npm/packages/%40sanity%2Fcli-core/versions/3.14.1:dependencies — retrieved 2026-11-01T11:23:54.479Z
https://api.deps.dev/v3/projects/github.com%2Fsanity-io%2Fcli — retrieved 2026-11-01T11:23:54.860Z