commitizen 2.4.6
Git commit, but play nice with conventions.
commitizen@2.4.6 was published on 2015-11-17. Its manifest declares 18 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.
All commitizen versions · Permanent reference to 2.4.6 · Latest release
Package specifications
| Version | 2.4.6 |
|---|---|
| License declaration | MIT |
| Published | 2015-11-17T20:24:31.124Z |
| Node.js requirement | Not declared |
| Type declarations | Not declared |
| Runtime dependency count | 18 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | Not supplied |
| Published file count | Not supplied |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | src/index.js |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 512 |
| Repository stars | 17495 |
| Repository forks | 565 |
Install commitizen 2.4.6
npm install commitizen@2.4.6 pnpm add commitizen@2.4.6 yarn add commitizen@2.4.6
Runtime dependencies
- glob 5.0.15
- gulp 3.9.0
- babel 5.8.29
- chalk 1.1.1
- dedent 0.6.0
- lodash 3.10.1
- rimraf 2.4.3
- semver 5.0.3
- nodemon 1.8.1
- shelljs 0.5.3
- gulp-git 1.6.0
- inquirer 0.11.0
- minimist 1.2.0
- node-uuid 1.4.3
- detect-indent 4.0.0
- find-node-modules 1.0.1
- strip-json-comments 1.0.4
- cz-conventional-changelog 1.1.4
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- babel@5.8.29 — direct
- chalk@1.1.1 — direct
- cz-conventional-changelog@1.1.4 — direct
- dedent@0.6.0 — direct
- detect-indent@4.0.0 — direct
- find-node-modules@1.0.1 — direct
- glob@5.0.15 — direct
- gulp@3.9.0 — direct
- gulp-git@1.6.0 — direct
- inquirer@0.11.0 — direct
- lodash@3.10.1 — direct
- minimist@1.2.0 — direct
- node-uuid@1.4.3 — direct
- nodemon@1.8.1 — direct
- rimraf@2.4.3 — direct
- semver@5.0.3 — direct
- shelljs@0.5.3 — direct
- strip-json-comments@1.0.4 — direct
- babel-core@5.8.38 — indirect
- chokidar@1.7.0 — indirect
- commander@2.20.3 — indirect
- convert-source-map@1.9.0 — indirect
- fs-readdir-recursive@0.1.2 — indirect
- output-file-sync@1.1.2 — indirect
- path-exists@1.0.0 — indirect
- path-is-absolute@1.0.1 — indirect
- slash@1.0.0 — indirect
- source-map@0.5.7 — indirect
- ansi-styles@2.2.1 — indirect
- escape-string-regexp@1.0.5 — indirect
- has-ansi@2.0.0 — indirect
- strip-ansi@3.0.1 — indirect
- supports-color@2.0.0 — indirect
- word-wrap@1.2.5 — indirect
- repeating@2.0.1 — indirect
- findup-sync@0.2.1 — indirect
- merge@1.2.1 — indirect
- inflight@1.0.6 — indirect
- inherits@2.0.4 — indirect
- minimatch@2.0.10 — indirect
- once@1.4.0 — indirect
- archy@1.0.0 — indirect
- deprecated@0.0.1 — indirect
- gulp-util@3.0.8 — indirect
- interpret@0.6.6 — indirect
- liftoff@2.5.0 — indirect
- orchestrator@0.3.8 — indirect
- pretty-hrtime@1.0.3 — indirect
- semver@4.3.6 — indirect
- tildify@1.2.0 — indirect
- v8flags@2.1.1 — indirect
- vinyl-fs@0.3.14 — indirect
- any-shell-escape@0.1.1 — indirect
- require-dir@0.1.0 — indirect
- through2@0.6.5 — indirect
- ansi-escapes@1.4.0 — indirect
- ansi-regex@2.1.1 — indirect
- cli-cursor@1.0.2 — indirect
- cli-width@1.1.1 — indirect
- figures@1.7.0 — indirect
- readline2@1.0.1 — indirect
- run-async@0.1.0 — indirect
- rx-lite@3.1.2 — indirect
- through@2.3.8 — indirect
- debug@2.6.9 — indirect
- es6-promise@3.3.1 — indirect
- lodash.defaults@3.1.2 — indirect
- minimatch@3.1.5 — indirect
- ps-tree@1.2.0 — indirect
- touch@1.0.0 — indirect
- undefsafe@0.0.3 — indirect
- update-notifier@0.5.0 — indirect
- babel-plugin-constant-folding@1.0.1 — indirect
- babel-plugin-dead-code-elimination@1.0.2 — indirect
- babel-plugin-eval@1.0.1 — indirect
- babel-plugin-inline-environment-variables@1.0.1 — indirect
- babel-plugin-jscript@1.0.4 — indirect
- babel-plugin-member-expression-literals@1.0.1 — indirect
- babel-plugin-property-literals@1.0.1 — indirect
- babel-plugin-proto-to-assign@1.0.4 — indirect
- babel-plugin-react-constant-elements@1.0.3 — indirect
- babel-plugin-react-display-name@1.0.3 — indirect
- babel-plugin-remove-console@1.0.1 — indirect
- babel-plugin-remove-debugger@1.0.1 — indirect
- babel-plugin-runtime@1.0.7 — indirect
- babel-plugin-undeclared-variables-check@1.0.2 — indirect
- babel-plugin-undefined-to-void@1.1.6 — indirect
- babylon@5.8.38 — indirect
- bluebird@2.11.0 — indirect
- core-js@1.2.7 — indirect
- detect-indent@3.0.1 — indirect
- esutils@2.0.3 — indirect
- globals@6.4.1 — indirect
- home-or-tmp@1.0.0 — indirect
- is-integer@1.0.7 — indirect
- js-tokens@1.0.1 — indirect
- json5@0.4.0 — indirect
- private@0.1.8 — indirect
- regenerator@0.8.40 — indirect
- regexpu@1.3.0 — indirect
- repeating@1.1.3 — indirect
- resolve@1.22.13 — indirect
- shebang-regex@1.0.0 — indirect
- source-map-support@0.2.10 — indirect
- to-fast-properties@1.0.3 — indirect
- trim-right@1.0.1 — indirect
- try-resolve@1.0.1 — indirect
- anymatch@1.3.2 — indirect
- async-each@1.0.6 — indirect
- fsevents@1.2.13 — indirect
- glob-parent@2.0.0 — indirect
- is-binary-path@1.0.1 — indirect
- is-glob@2.0.1 — indirect
- readdirp@2.2.1 — indirect
- graceful-fs@4.2.11 — indirect
- mkdirp@0.5.6 — indirect
- object-assign@4.1.1 — indirect
- is-finite@1.1.0 — indirect
- glob@4.3.5 — indirect
- wrappy@1.0.2 — indirect
- brace-expansion@1.1.21 — indirect
- array-differ@1.0.0 — indirect
- array-uniq@1.0.3 — indirect
- beeper@1.1.1 — indirect
- dateformat@2.2.0 — indirect
- fancy-log@1.3.3 — indirect
- gulplog@1.0.0 — indirect
- has-gulplog@0.1.0 — indirect
- lodash._reescape@3.0.0 — indirect
- lodash._reevaluate@3.0.0 — indirect
- lodash._reinterpolate@3.0.0 — indirect
- lodash.template@3.6.2 — indirect
- multipipe@0.1.2 — indirect
- object-assign@3.0.0 — indirect
- replace-ext@0.0.1 — indirect
- through2@2.0.5 — indirect
- vinyl@0.5.3 — indirect
- extend@3.0.2 — indirect
- findup-sync@2.0.0 — indirect
- fined@1.2.0 — indirect
- flagged-respawn@1.0.1 — indirect
- is-plain-object@2.0.4 — indirect
- object.map@1.0.1 — indirect
- rechoir@0.6.2 — indirect
- end-of-stream@0.1.5 — indirect
- sequencify@0.0.7 — indirect
- stream-consume@0.1.1 — indirect
- os-homedir@1.0.2 — indirect
- user-home@1.1.1 — indirect
- defaults@1.0.4 — indirect
- glob-stream@3.1.18 — indirect
- glob-watcher@0.0.6 — indirect
- graceful-fs@3.0.12 — indirect
- strip-bom@1.0.0 — indirect
- through2@0.6.5 — indirect
- vinyl@0.4.6 — indirect
- readable-stream@1.0.34 — indirect
- xtend@4.0.2 — indirect
- restore-cursor@1.0.1 — indirect
- code-point-at@1.1.0 — indirect
- is-fullwidth-code-point@1.0.0 — indirect
- mute-stream@0.0.5 — indirect
- ms@2.0.0 — indirect
- lodash.assign@3.2.0 — indirect
- lodash.restparam@3.6.1 — indirect
- event-stream@3.3.4 — indirect
- nopt@1.0.10 — indirect
- configstore@1.4.0 — indirect
- is-npm@1.0.0 — indirect
- latest-version@1.0.1 — indirect
- semver-diff@2.1.0 — indirect
- string-length@1.0.1 — indirect
- leven@1.0.2 — indirect
- get-stdin@4.0.1 — indirect
- os-tmpdir@1.0.2 — indirect
- commoner@0.10.8 — indirect
- defs@1.1.1 — indirect
- esprima-fb@15001.1001.0-dev-harmony-fb — indirect
- recast@0.10.33 — indirect
- esprima@2.7.3 — indirect
- regenerate@1.5.0 — indirect
- regjsgen@0.2.0 — indirect
- regjsparser@0.1.5 — indirect
- es-errors@1.3.0 — indirect
- is-core-module@2.17.0 — indirect
- path-parse@1.0.7 — indirect
- supports-preserve-symlinks-flag@1.0.0 — indirect
- source-map@0.1.32 — indirect
- micromatch@2.3.11 — indirect
- normalize-path@2.1.1 — indirect
- bindings@1.5.0 — indirect
- nan@2.30.0 — indirect
- binary-extensions@1.13.1 — indirect
- is-extglob@1.0.0 — indirect
- micromatch@3.1.10 — indirect
- readable-stream@2.3.8 — indirect
- minimist@1.2.8 — indirect
- balanced-match@1.0.2 — indirect
- concat-map@0.0.1 — indirect
- ansi-gray@0.1.1 — indirect
- color-support@1.1.3 — indirect
- parse-node-version@1.0.1 — indirect
- time-stamp@1.1.0 — indirect
- glogg@1.0.2 — indirect
- sparkles@1.0.1 — indirect
- lodash._basecopy@3.0.1 — indirect
- lodash._basetostring@3.0.1 — indirect
- lodash._basevalues@3.0.0 — indirect
- lodash._isiterateecall@3.0.9 — indirect
- lodash.escape@3.2.0 — indirect
- lodash.keys@3.1.2 — indirect
- lodash.templatesettings@3.1.1 — indirect
- duplexer2@0.0.2 — indirect
- clone@1.0.4 — indirect
- clone-stats@0.0.1 — indirect
- detect-file@1.0.0 — indirect
- is-glob@3.1.0 — indirect
- micromatch@3.1.10 — indirect
- resolve-dir@1.0.1 — indirect
- expand-tilde@2.0.2 — indirect
- object.defaults@1.1.0 — indirect
- object.pick@1.3.0 — indirect
- parse-filepath@1.0.2 — indirect
- isobject@3.0.1 — indirect
- for-own@1.0.0 — indirect
- make-iterator@1.0.1 — indirect
- once@1.3.3 — indirect
- glob@4.5.3 — indirect
- glob2base@0.0.12 — indirect
- ordered-read-streams@0.1.0 — indirect
- through2@0.6.5 — indirect
- unique-stream@1.0.0 — indirect
- gaze@0.5.2 — indirect
- natives@1.1.6 — indirect
- first-chunk-stream@1.0.0 — indirect
- is-utf8@0.2.1 — indirect
- readable-stream@1.0.34 — indirect
- clone@0.2.0 — indirect
- core-util-is@1.0.3 — indirect
- isarray@0.0.1 — indirect
- string_decoder@0.10.31 — indirect
- exit-hook@1.1.1 — indirect
- onetime@1.1.0 — indirect
- number-is-nan@1.0.1 — indirect
- lodash._baseassign@3.2.0 — indirect
- lodash._createassigner@3.1.1 — indirect
- duplexer@0.1.2 — indirect
- from@0.1.7 — indirect
- map-stream@0.1.0 — indirect
- pause-stream@0.0.11 — indirect
- split@0.3.3 — indirect
- stream-combiner@0.0.4 — indirect
- abbrev@1.1.1 — indirect
- osenv@0.1.5 — indirect
- uuid@2.0.3 — indirect
- write-file-atomic@1.3.4 — indirect
- xdg-basedir@2.0.0 — indirect
- package-json@1.2.0 — indirect
- detective@4.7.1 — indirect
- iconv-lite@0.4.24 — indirect
- q@1.5.1 — indirect
- recast@0.11.23 — indirect
- alter@0.2.0 — indirect
- ast-traverse@0.1.1 — indirect
- breakable@1.0.0 — indirect
- simple-fmt@0.1.0 — indirect
- simple-is@0.2.0 — indirect
- stringmap@0.2.2 — indirect
- stringset@0.2.1 — indirect
- tryor@0.1.2 — indirect
- yargs@3.27.0 — indirect
- ast-types@0.8.12 — indirect
- jsesc@0.5.0 — indirect
- hasown@2.0.4 — indirect
- amdefine@1.0.1 — indirect
- arr-diff@2.0.0 — indirect
- array-unique@0.2.1 — indirect
- braces@1.8.5 — indirect
- expand-brackets@0.1.5 — indirect
- extglob@0.3.2 — indirect
- filename-regex@2.0.1 — indirect
- kind-of@3.2.2 — indirect
- object.omit@2.0.1 — indirect
- parse-glob@3.0.4 — indirect
- regex-cache@0.4.4 — indirect
- remove-trailing-separator@1.1.0 — indirect
- file-uri-to-path@1.0.0 — indirect
- arr-diff@4.0.0 — indirect
- array-unique@0.3.2 — indirect
- braces@2.3.2 — indirect
- define-property@2.0.2 — indirect
- extend-shallow@3.0.2 — indirect
- extglob@2.0.4 — indirect
- fragment-cache@0.2.1 — indirect
- kind-of@6.0.3 — indirect
- nanomatch@1.2.13 — indirect
- regex-not@1.0.2 — indirect
- snapdragon@0.8.2 — indirect
- to-regex@3.0.2 — indirect
- isarray@1.0.0 — indirect
- process-nextick-args@2.0.1 — indirect
- safe-buffer@5.1.2 — indirect
- string_decoder@1.1.1 — indirect
- util-deprecate@1.0.2 — indirect
- ansi-wrap@0.1.0 — indirect
- lodash._root@3.0.1 — indirect
- lodash._getnative@3.9.1 — indirect
- lodash.isarguments@3.1.0 — indirect
- lodash.isarray@3.0.4 — indirect
- readable-stream@1.1.14 — indirect
- is-extglob@2.1.1 — indirect
- arr-diff@4.0.0 — indirect
- array-unique@0.3.2 — indirect
- braces@2.3.2 — indirect
- extglob@2.0.4 — indirect
- kind-of@6.0.3 — indirect
- global-modules@1.0.0 — indirect
- homedir-polyfill@1.0.3 — indirect
- array-each@1.0.1 — indirect
- array-slice@1.1.0 — indirect
- for-own@1.0.0 — indirect
- isobject@3.0.1 — indirect
- isobject@3.0.1 — indirect
- is-absolute@1.0.0 — indirect
- map-cache@0.2.2 — indirect
- path-root@0.1.1 — indirect
- for-in@1.0.2 — indirect
- kind-of@6.0.3 — indirect
- find-index@0.1.1 — indirect
- readable-stream@1.0.34 — indirect
- globule@0.1.0 — indirect
- isarray@0.0.1 — indirect
- string_decoder@0.10.31 — indirect
- lodash._bindcallback@3.0.1 — indirect
- imurmurhash@0.1.4 — indirect
- slide@1.1.6 — indirect
- got@3.3.1 — indirect
- registry-url@3.1.0 — indirect
- acorn@5.7.4 — indirect
- defined@1.0.1 — indirect
- safer-buffer@2.1.2 — indirect
- ast-types@0.9.6 — indirect
- esprima@3.1.3 — indirect
- stable@0.1.8 — indirect
- camelcase@1.2.1 — indirect
- cliui@2.1.0 — indirect
- decamelize@1.2.0 — indirect
- os-locale@1.4.0 — indirect
- window-size@0.1.4 — indirect
- y18n@3.2.2 — indirect
- function-bind@1.1.2 — indirect
- arr-flatten@1.1.0 — indirect
- expand-range@1.8.2 — indirect
- preserve@0.2.0 — indirect
- repeat-element@1.1.4 — indirect
- is-posix-bracket@0.1.1 — indirect
- is-buffer@1.1.6 — indirect
- for-own@0.1.5 — indirect
- is-extendable@0.1.1 — indirect
- glob-base@0.3.0 — indirect
- is-dotfile@1.0.3 — indirect
- is-equal-shallow@0.1.3 — indirect
- extend-shallow@2.0.1 — indirect
- fill-range@4.0.0 — indirect
- isobject@3.0.1 — indirect
- snapdragon-node@2.1.1 — indirect
- split-string@3.1.0 — indirect
- is-descriptor@1.0.4 — indirect
- isobject@3.0.1 — indirect
- assign-symbols@1.0.0 — indirect
- is-extendable@1.0.1 — indirect
- define-property@1.0.0 — indirect
- expand-brackets@2.1.4 — indirect
- extend-shallow@2.0.1 — indirect
- arr-diff@4.0.0 — indirect
- array-unique@0.3.2 — indirect
- is-windows@1.0.2 — indirect
- kind-of@6.0.3 — indirect
- safe-regex@1.1.0 — indirect
- base@0.11.2 — indirect
- define-property@0.2.5 — indirect
- extend-shallow@2.0.1 — indirect
- source-map-resolve@0.5.3 — indirect
- use@3.1.1 — indirect
- isarray@0.0.1 — indirect
- string_decoder@0.10.31 — indirect
- extend-shallow@2.0.1 — indirect
- fill-range@4.0.0 — indirect
- isobject@3.0.1 — indirect
- define-property@1.0.0 — indirect
- expand-brackets@2.1.4 — indirect
- extend-shallow@2.0.1 — indirect
- global-prefix@1.0.2 — indirect
- parse-passwd@1.0.0 — indirect
- is-relative@1.0.0 — indirect
- path-root-regex@0.1.2 — indirect
- isarray@0.0.1 — indirect
- string_decoder@0.10.31 — indirect
- glob@3.1.21 — indirect
- lodash@1.0.2 — indirect
- minimatch@0.2.14 — indirect
- duplexify@3.7.1 — indirect
- infinity-agent@2.0.3 — indirect
- is-redirect@1.0.0 — indirect
- is-stream@1.1.0 — indirect
- lowercase-keys@1.0.1 — indirect
- nested-error-stacks@1.0.2 — indirect
- object-assign@3.0.0 — indirect
- prepend-http@1.0.4 — indirect
- read-all-stream@3.1.0 — indirect
- timed-out@2.0.0 — indirect
- rc@1.2.8 — indirect
- center-align@0.1.3 — indirect
- right-align@0.1.3 — indirect
- wordwrap@0.0.2 — indirect
- lcid@1.0.0 — indirect
- fill-range@2.2.4 — indirect
- is-primitive@2.0.0 — indirect
- extend-shallow@2.0.1 — indirect
- is-number@3.0.0 — indirect
- repeat-string@1.6.1 — indirect
- to-regex-range@2.1.1 — indirect
- define-property@1.0.0 — indirect
- isobject@3.0.1 — indirect
- snapdragon-util@3.0.1 — indirect
- is-accessor-descriptor@1.0.2 — indirect
- is-data-descriptor@1.0.1 — indirect
- is-descriptor@1.0.4 — indirect
- define-property@0.2.5 — indirect
- extend-shallow@2.0.1 — indirect
- posix-character-classes@0.1.1 — indirect
- ret@0.1.15 — indirect
- cache-base@1.0.1 — indirect
- class-utils@0.3.6 — indirect
- component-emitter@1.3.1 — indirect
- define-property@1.0.0 — indirect
- isobject@3.0.1 — indirect
- mixin-deep@1.3.2 — indirect
- pascalcase@0.1.1 — indirect
- is-descriptor@0.1.8 — indirect
- atob@2.1.2 — indirect
- decode-uri-component@0.2.2 — indirect
- resolve-url@0.2.1 — indirect
- source-map-url@0.4.1 — indirect
- urix@0.1.0 — indirect
- extend-shallow@2.0.1 — indirect
- is-number@3.0.0 — indirect
- is-descriptor@1.0.4 — indirect
- define-property@0.2.5 — indirect
- extend-shallow@2.0.1 — indirect
- ini@1.3.8 — indirect
- which@1.3.1 — indirect
- is-unc-path@1.0.0 — indirect
- graceful-fs@1.2.3 — indirect
- inherits@1.0.2 — indirect
- lru-cache@2.7.3 — indirect
- sigmund@1.0.1 — indirect
- end-of-stream@1.4.5 — indirect
- stream-shift@1.0.3 — indirect
- pinkie-promise@2.0.1 — indirect
- deep-extend@0.6.0 — indirect
- strip-json-comments@2.0.1 — indirect
- align-text@0.1.4 — indirect
- lazy-cache@1.0.4 — indirect
- invert-kv@1.0.0 — indirect
- is-number@2.1.0 — indirect
- isobject@2.1.0 — indirect
- randomatic@3.1.1 — indirect
- kind-of@3.2.2 — indirect
- is-number@3.0.0 — indirect
- is-descriptor@1.0.4 — indirect
- is-descriptor@0.1.8 — indirect
- collection-visit@1.0.0 — indirect
- get-value@2.0.6 — indirect
- has-value@1.0.0 — indirect
- isobject@3.0.1 — indirect
- set-value@2.0.1 — indirect
- to-object-path@0.3.0 — indirect
- union-value@1.0.1 — indirect
- unset-value@1.0.0 — indirect
- arr-union@3.1.0 — indirect
- define-property@0.2.5 — indirect
- isobject@3.0.1 — indirect
- static-extend@0.1.2 — indirect
- is-descriptor@1.0.4 — indirect
- is-extendable@1.0.1 — indirect
- kind-of@3.2.2 — indirect
- is-descriptor@0.1.8 — indirect
- isexe@2.0.0 — indirect
- unc-path-regex@0.1.2 — indirect
- pinkie@2.0.4 — indirect
- longest@1.0.1 — indirect
- is-number@4.0.0 — indirect
- kind-of@6.0.3 — indirect
- math-random@1.0.4 — indirect
- map-visit@1.0.0 — indirect
- object-visit@1.0.1 — indirect
- has-values@1.0.0 — indirect
- isobject@3.0.1 — indirect
- extend-shallow@2.0.1 — indirect
- has-value@0.3.1 — indirect
- isobject@3.0.1 — indirect
- define-property@0.2.5 — indirect
- object-copy@0.1.0 — indirect
- isobject@3.0.1 — indirect
- is-number@3.0.0 — indirect
- kind-of@4.0.0 — indirect
- has-values@0.1.4 — indirect
- isobject@2.1.0 — indirect
- copy-descriptor@0.1.1 — indirect
- define-property@0.2.5 — indirect
- kind-of@3.2.2 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
|---|---|
| Maintained | 5/10 — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Code-Review | 6/10 — Found 10/15 approved changesets -- score normalized to 6 |
| Token-Permissions | 9/10 — detected GitHub workflow tokens with excessive permissions |
| Pinned-Dependencies | 0/10 — dependency not pinned by hash detected -- score normalized to 0 |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| Security-Policy | 0/10 — security policy file not detected |
| Fuzzing | 0/10 — project is not fuzzed |
| Packaging | 10/10 — packaging workflow detected |
| License | 10/10 — license file detected |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
Evidence and freshness
- https://registry.npmjs.org/commitizen/2.4.6 — retrieved 2026-10-29T12:14:56.902Z
- https://api.deps.dev/v3/projects/github.com%2Fcommitizen%2Fcz-cli — retrieved 2026-10-29T11:47:12.690Z
- https://api.deps.dev/v3/systems/npm/packages/commitizen/versions/2.4.6 — retrieved 2026-10-29T12:14:57.416Z
- https://api.deps.dev/v3/systems/npm/packages/commitizen/versions/2.4.6:dependencies — retrieved 2026-10-29T12:14:57.468Z