codecov

Uploading report to Codecov: https://codecov.io

codecov@3.8.3 was published on 2021-07-19. Its manifest declares 5 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=4.0.

Deprecated: https://about.codecov.io/blog/codecov-uploader-deprecation-plan/

All codecov versions · Permanent reference to 3.8.3

Package specifications

Version	3.8.3
License declaration	MIT
Published	2021-07-19T18:15:27.758Z
Node.js requirement	>=4.0
Type declarations	Not declared
Runtime dependency count	5
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	81.96 KiB
Published file count	65
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	27
Repository stars	292
Repository forks	109

Install codecov 3.8.3

npm install codecov@3.8.3
pnpm add codecov@3.8.3
yarn add codecov@3.8.3

Runtime dependencies

argv 0.0.2
js-yaml 3.14.1
urlgrey 1.0.0
ignore-walk 3.0.4
teeny-request 7.1.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@tootallnate/once@1.1.2 — indirect
agent-base@6.0.2 — indirect
argparse@1.0.10 — indirect
argv@0.0.2 — direct
balanced-match@1.0.2 — indirect
brace-expansion@1.1.21 — indirect
concat-map@0.0.1 — indirect
debug@4.4.3 — indirect
esprima@4.0.1 — indirect
fast-url-parser@1.1.3 — indirect
http-proxy-agent@4.0.1 — indirect
https-proxy-agent@5.0.1 — indirect
ignore-walk@3.0.4 — direct
js-yaml@3.14.1 — direct
minimatch@3.1.5 — indirect
ms@2.1.3 — indirect
node-fetch@2.7.0 — indirect
punycode@1.4.1 — indirect
sprintf-js@1.0.3 — indirect
stream-events@1.0.5 — indirect
stubs@3.0.0 — indirect
teeny-request@7.1.1 — direct
tr46@0.0.3 — indirect
urlgrey@1.0.0 — direct
uuid@8.3.2 — indirect
webidl-conversions@3.0.1 — indirect
whatwg-url@5.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — project is archived
Code-Review	10/10 — all changesets reviewed
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Branch-Protection	0/10 — branch protection not enabled on development/release branches
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/codecov/3.8.3 — retrieved 2026-10-29T13:38:09.730Z
https://api.deps.dev/v3/systems/npm/packages/codecov/versions/3.8.3 — retrieved 2026-10-29T13:38:09.676Z
https://api.deps.dev/v3/systems/npm/packages/codecov/versions/3.8.3:dependencies — retrieved 2026-10-29T13:38:09.706Z
https://api.deps.dev/v3/projects/github.com%2Fcodecov%2Fcodecov-node — retrieved 2026-10-29T13:38:10.457Z