cheerio

The fast, flexible & elegant library for parsing and manipulating HTML and XML.

cheerio@1.2.0 was published on 2026-01-23. Its manifest declares 11 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=20.18.1.

All cheerio versions · Permanent reference to 1.2.0

Package specifications

Version	1.2.0
License declaration	MIT
Published	2026-01-23T16:29:49.559Z
Node.js requirement	>=20.18.1
Type declarations	Bundled declarations
Runtime dependency count	11
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	987.54 KiB
Published file count	228
Package type	module
ES module entry	./dist/esm/index.js
Default entry	./dist/commonjs/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	22
Repository stars	30538
Repository forks	1739

Install cheerio 1.2.0

npm install cheerio@1.2.0
pnpm add cheerio@1.2.0
yarn add cheerio@1.2.0

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

boolbase@1.0.0 — indirect
cheerio-select@2.1.0 — direct
css-select@5.2.2 — indirect
css-what@6.2.2 — indirect
dom-serializer@2.0.0 — direct
domelementtype@2.3.0 — indirect
domhandler@5.0.3 — direct
domutils@3.2.2 — direct
encoding-sniffer@0.2.1 — direct
entities@4.5.0 — indirect
entities@6.0.1 — indirect
entities@7.0.1 — indirect
htmlparser2@10.1.0 — direct
iconv-lite@0.6.3 — indirect
nth-check@2.1.1 — indirect
parse5@7.3.0 — direct
parse5-htmlparser2-tree-adapter@7.1.0 — direct
parse5-parser-stream@7.1.2 — direct
safer-buffer@2.1.2 — indirect
undici@7.30.1 — direct
whatwg-encoding@3.1.1 — indirect
whatwg-mimetype@4.0.0 — direct

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	10/10 — security policy file detected
Binary-Artifacts	10/10 — no binaries found in the repo
Code-Review	4/10 — Found 3/7 approved changesets -- score normalized to 4
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Pinned-Dependencies	10/10 — all dependencies are pinned
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
CII-Best-Practices	2/10 — badge detected: InProgress
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
SAST	10/10 — SAST tool is run on all commits

Evidence and freshness

https://registry.npmjs.org/cheerio/1.2.0 — retrieved 2026-10-29T06:03:32.746Z (stale snapshot; refresh pending)
https://api.deps.dev/v3/projects/github.com%2Fcheeriojs%2Fcheerio — retrieved 2026-10-29T06:03:33.321Z
https://api.deps.dev/v3/systems/npm/packages/cheerio/versions/1.2.0 — retrieved 2026-10-29T08:00:25.061Z
https://api.deps.dev/v3/systems/npm/packages/cheerio/versions/1.2.0:dependencies — retrieved 2026-10-29T08:00:25.091Z