c8 5.0.4

output coverage reports using Node.js' built in coverage

c8@5.0.4 was published on 2019-09-06. Its manifest declares 12 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=10.12.0.

All c8 versions · Permanent reference to 5.0.4 · Latest release

Package specifications

Version	5.0.4
License declaration	ISC
Published	2019-09-06T22:28:17.640Z
Node.js requirement	>=10.12.0
Type declarations	Not declared
Runtime dependency count	12
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	27.25 KiB
Published file count	10
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	99
Repository stars	2124
Repository forks	100

Install c8 5.0.4

npm install c8@5.0.4
pnpm add c8@5.0.4
yarn add c8@5.0.4

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@bcoe/v8-coverage@0.2.3 — direct
find-up@4.1.0 — direct
foreground-child@2.0.0 — direct
furi@1.3.0 — direct
istanbul-lib-coverage@2.0.5 — direct
istanbul-lib-report@2.0.8 — direct
istanbul-reports@2.2.7 — direct
rimraf@3.0.2 — direct
test-exclude@5.2.3 — direct
v8-to-istanbul@3.2.6 — direct
yargs@14.2.3 — direct
yargs-parser@14.0.0 — direct
locate-path@5.0.0 — indirect
path-exists@4.0.0 — indirect
cross-spawn@7.0.6 — indirect
signal-exit@3.0.7 — indirect
@types/is-windows@0.2.0 — indirect
is-windows@1.0.2 — indirect
make-dir@2.1.0 — indirect
supports-color@6.1.0 — indirect
html-escaper@2.0.2 — indirect
glob@7.2.3 — indirect
minimatch@3.1.5 — indirect
read-pkg-up@4.0.0 — indirect
require-main-filename@2.0.0 — indirect
@types/istanbul-lib-coverage@2.0.6 — indirect
convert-source-map@1.9.0 — indirect
source-map@0.7.6 — indirect
cliui@5.0.0 — indirect
decamelize@1.2.0 — indirect
find-up@3.0.0 — indirect
get-caller-file@2.0.5 — indirect
require-directory@2.1.1 — indirect
set-blocking@2.0.0 — indirect
string-width@3.1.0 — indirect
which-module@2.0.1 — indirect
y18n@4.0.3 — indirect
yargs-parser@15.0.3 — indirect
camelcase@5.3.1 — indirect
p-locate@4.1.0 — indirect
path-key@3.1.1 — indirect
shebang-command@2.0.0 — indirect
which@2.0.2 — indirect
pify@4.0.1 — indirect
semver@5.7.2 — indirect
has-flag@3.0.0 — indirect
fs.realpath@1.0.0 — indirect
inflight@1.0.6 — indirect
inherits@2.0.4 — indirect
once@1.4.0 — indirect
path-is-absolute@1.0.1 — indirect
brace-expansion@1.1.21 — indirect
find-up@3.0.0 — indirect
read-pkg@3.0.0 — indirect
strip-ansi@5.2.0 — indirect
wrap-ansi@5.1.0 — indirect
locate-path@3.0.0 — indirect
emoji-regex@7.0.3 — indirect
is-fullwidth-code-point@2.0.0 — indirect
p-limit@2.3.0 — indirect
shebang-regex@3.0.0 — indirect
isexe@2.0.0 — indirect
wrappy@1.0.2 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
locate-path@3.0.0 — indirect
load-json-file@4.0.0 — indirect
normalize-package-data@2.5.0 — indirect
path-type@3.0.0 — indirect
ansi-regex@4.1.1 — indirect
ansi-styles@3.2.1 — indirect
p-locate@3.0.0 — indirect
path-exists@3.0.0 — indirect
p-try@2.2.0 — indirect
p-locate@3.0.0 — indirect
path-exists@3.0.0 — indirect
graceful-fs@4.2.11 — indirect
parse-json@4.0.0 — indirect
pify@3.0.0 — indirect
strip-bom@3.0.0 — indirect
hosted-git-info@2.8.9 — indirect
resolve@1.22.13 — indirect
validate-npm-package-license@3.0.4 — indirect
pify@3.0.0 — indirect
color-convert@1.9.3 — indirect
error-ex@1.3.4 — indirect
json-parse-better-errors@1.0.2 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
color-name@1.1.3 — indirect
is-arrayish@0.2.1 — indirect
hasown@2.0.4 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
function-bind@1.1.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	5/10 — Found 8/16 approved changesets -- score normalized to 5
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	10/10 — no binaries found in the repo
Maintained	2/10 — 2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	3/10 — dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Security-Policy	0/10 — security policy file not detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/c8/5.0.4 — retrieved 2026-10-31T14:14:35.690Z
https://api.deps.dev/v3/projects/github.com%2Fbcoe%2Fc8 — retrieved 2026-10-31T11:43:14.832Z
https://api.deps.dev/v3/systems/npm/packages/c8/versions/5.0.4:dependencies — retrieved 2026-10-31T14:14:36.132Z
https://api.deps.dev/v3/systems/npm/packages/c8/versions/5.0.4 — retrieved 2026-10-31T14:14:36.255Z