@semantic-release/commit-analyzer 8.0.0

semantic-release plugin to analyze commits with conventional-changelog

@semantic-release/commit-analyzer@8.0.0 was published on 2020-01-27. Its manifest declares 7 runtime dependencies and 1 peer requirement. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=10.18.

All @semantic-release/commit-analyzer versions · Permanent reference to 8.0.0 · Latest release

Package specifications

Version	8.0.0
License declaration	MIT
Published	2020-01-27T21:05:01.967Z
Node.js requirement	>=10.18
Type declarations	Not declared
Runtime dependency count	7
Peer requirement count	1
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	32.94 KiB
Published file count	10
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	186
Repository stars	446
Repository forks	82

Install @semantic-release/commit-analyzer 8.0.0

npm install @semantic-release/commit-analyzer@8.0.0
pnpm add @semantic-release/commit-analyzer@8.0.0
yarn add @semantic-release/commit-analyzer@8.0.0

Runtime dependencies

Peer requirements

semantic-release >=16.0.0 <18.0.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

conventional-changelog-angular@5.0.13 — direct
conventional-commits-filter@2.0.7 — direct
conventional-commits-parser@3.2.4 — direct
debug@4.4.3 — direct
import-from@3.0.0 — direct
lodash@4.18.1 — direct
micromatch@3.1.10 — direct
compare-func@2.0.0 — indirect
q@1.5.1 — indirect
lodash.ismatch@4.4.0 — indirect
modify-values@1.0.1 — indirect
JSONStream@1.3.5 — indirect
is-text-path@1.0.1 — indirect
meow@8.1.2 — indirect
split2@3.2.2 — indirect
through2@4.0.2 — indirect
ms@2.1.3 — indirect
resolve-from@5.0.0 — indirect
arr-diff@4.0.0 — indirect
array-unique@0.3.2 — indirect
braces@2.3.2 — indirect
define-property@2.0.2 — indirect
extend-shallow@3.0.2 — indirect
extglob@2.0.4 — indirect
fragment-cache@0.2.1 — indirect
kind-of@6.0.3 — indirect
nanomatch@1.2.13 — indirect
object.pick@1.3.0 — indirect
regex-not@1.0.2 — indirect
snapdragon@0.8.2 — indirect
to-regex@3.0.2 — indirect
array-ify@1.0.0 — indirect
dot-prop@5.3.0 — indirect
jsonparse@1.3.1 — indirect
through@2.3.8 — indirect
text-extensions@1.9.0 — indirect
@types/minimist@1.2.5 — indirect
camelcase-keys@6.2.2 — indirect
decamelize-keys@1.1.1 — indirect
hard-rejection@2.1.0 — indirect
minimist-options@4.1.0 — indirect
normalize-package-data@3.0.3 — indirect
read-pkg-up@7.0.1 — indirect
redent@3.0.0 — indirect
trim-newlines@3.0.1 — indirect
type-fest@0.18.1 — indirect
yargs-parser@20.2.9 — indirect
readable-stream@3.6.2 — indirect
arr-flatten@1.1.0 — indirect
extend-shallow@2.0.1 — indirect
fill-range@4.0.0 — indirect
isobject@3.0.1 — indirect
repeat-element@1.1.4 — indirect
snapdragon-node@2.1.1 — indirect
split-string@3.1.0 — indirect
is-descriptor@1.0.4 — indirect
assign-symbols@1.0.0 — indirect
is-extendable@1.0.1 — indirect
define-property@1.0.0 — indirect
expand-brackets@2.1.4 — indirect
extend-shallow@2.0.1 — indirect
map-cache@0.2.2 — indirect
is-windows@1.0.2 — indirect
safe-regex@1.1.0 — indirect
base@0.11.2 — indirect
debug@2.6.9 — indirect
define-property@0.2.5 — indirect
extend-shallow@2.0.1 — indirect
source-map@0.5.7 — indirect
source-map-resolve@0.5.3 — indirect
use@3.1.1 — indirect
is-obj@2.0.0 — indirect
camelcase@5.3.1 — indirect
map-obj@4.3.0 — indirect
quick-lru@4.0.1 — indirect
decamelize@1.2.0 — indirect
map-obj@1.0.1 — indirect
arrify@1.0.1 — indirect
is-plain-obj@1.1.0 — indirect
hosted-git-info@4.1.0 — indirect
is-core-module@2.17.0 — indirect
semver@7.8.5 — indirect
validate-npm-package-license@3.0.4 — indirect
find-up@4.1.0 — indirect
read-pkg@5.2.0 — indirect
type-fest@0.8.1 — indirect
indent-string@4.0.0 — indirect
strip-indent@3.0.0 — indirect
inherits@2.0.4 — indirect
string_decoder@1.3.0 — indirect
util-deprecate@1.0.2 — indirect
is-extendable@0.1.1 — indirect
extend-shallow@2.0.1 — indirect
is-number@3.0.0 — indirect
repeat-string@1.6.1 — indirect
to-regex-range@2.1.1 — indirect
define-property@1.0.0 — indirect
snapdragon-util@3.0.1 — indirect
is-accessor-descriptor@1.0.2 — indirect
is-data-descriptor@1.0.1 — indirect
is-plain-object@2.0.4 — indirect
is-descriptor@1.0.4 — indirect
debug@2.6.9 — indirect
define-property@0.2.5 — indirect
extend-shallow@2.0.1 — indirect
posix-character-classes@0.1.1 — indirect
ret@0.1.15 — indirect
cache-base@1.0.1 — indirect
class-utils@0.3.6 — indirect
component-emitter@1.3.1 — indirect
define-property@1.0.0 — indirect
mixin-deep@1.3.2 — indirect
pascalcase@0.1.1 — indirect
ms@2.0.0 — indirect
is-descriptor@0.1.8 — indirect
atob@2.1.2 — indirect
decode-uri-component@0.2.2 — indirect
resolve-url@0.2.1 — indirect
source-map-url@0.4.1 — indirect
urix@0.1.0 — indirect
lru-cache@6.0.0 — indirect
hasown@2.0.4 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
locate-path@5.0.0 — indirect
path-exists@4.0.0 — indirect
@types/normalize-package-data@2.4.4 — indirect
normalize-package-data@2.5.0 — indirect
parse-json@5.2.0 — indirect
type-fest@0.6.0 — indirect
min-indent@1.0.1 — indirect
safe-buffer@5.2.1 — indirect
kind-of@3.2.2 — indirect
is-descriptor@1.0.4 — indirect
kind-of@3.2.2 — indirect
ms@2.0.0 — indirect
collection-visit@1.0.0 — indirect
get-value@2.0.6 — indirect
has-value@1.0.0 — indirect
set-value@2.0.1 — indirect
to-object-path@0.3.0 — indirect
union-value@1.0.1 — indirect
unset-value@1.0.0 — indirect
arr-union@3.1.0 — indirect
define-property@0.2.5 — indirect
static-extend@0.1.2 — indirect
is-descriptor@1.0.4 — indirect
for-in@1.0.2 — indirect
is-extendable@1.0.1 — indirect
yallist@4.0.0 — indirect
function-bind@1.1.2 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
p-locate@4.1.0 — indirect
hosted-git-info@2.8.9 — indirect
resolve@1.22.13 — indirect
semver@5.7.2 — indirect
@babel/code-frame@7.29.7 — indirect
error-ex@1.3.4 — indirect
json-parse-even-better-errors@2.3.1 — indirect
lines-and-columns@1.2.4 — indirect
is-buffer@1.1.6 — indirect
map-visit@1.0.0 — indirect
object-visit@1.0.1 — indirect
has-values@1.0.0 — indirect
extend-shallow@2.0.1 — indirect
kind-of@3.2.2 — indirect
has-value@0.3.1 — indirect
define-property@0.2.5 — indirect
object-copy@0.1.0 — indirect
p-limit@2.3.0 — indirect
es-errors@1.3.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
@babel/helper-validator-identifier@7.29.7 — indirect
js-tokens@4.0.0 — indirect
picocolors@1.1.1 — indirect
is-arrayish@0.2.1 — indirect
kind-of@4.0.0 — indirect
has-values@0.1.4 — indirect
isobject@2.1.0 — indirect
copy-descriptor@0.1.1 — indirect
define-property@0.2.5 — indirect
kind-of@3.2.2 — indirect
p-try@2.2.0 — indirect
isarray@1.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Code-Review	0/10 — Found 0/1 approved changesets -- score normalized to 0
Binary-Artifacts	10/10 — no binaries found in the repo
Maintained	10/10 — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	10/10 — all dependencies are pinned
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Security-Policy	10/10 — security policy file detected
Packaging	10/10 — packaging workflow detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/%40semantic-release%2Fcommit-analyzer/8.0.0 — retrieved 2026-10-29T12:19:03.222Z
https://api.deps.dev/v3/projects/github.com%2Fsemantic-release%2Fcommit-analyzer — retrieved 2026-10-29T08:17:04.948Z
https://api.deps.dev/v3/systems/npm/packages/%40semantic-release%2Fcommit-analyzer/versions/8.0.0 — retrieved 2026-10-29T12:19:03.766Z
https://api.deps.dev/v3/systems/npm/packages/%40semantic-release%2Fcommit-analyzer/versions/8.0.0:dependencies — retrieved 2026-10-29T12:19:03.793Z