conventional-changelog-core 1.9.5

conventional-changelog core

conventional-changelog-core@1.9.5 was published on 2017-12-18. Its manifest declares 13 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

Deprecated: Deprecated and no longer maintained. Please use conventional-changelog instead.

All conventional-changelog-core versions · Permanent reference to 1.9.5 · Latest release

Package specifications

Version	1.9.5
License declaration	MIT
Published	2017-12-18T14:25:28.980Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	13
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	155
Repository stars	8525
Repository forks	740

Install conventional-changelog-core 1.9.5

npm install conventional-changelog-core@1.9.5
pnpm add conventional-changelog-core@1.9.5
yarn add conventional-changelog-core@1.9.5

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

conventional-changelog-writer@2.0.3 — direct
conventional-commits-parser@2.1.7 — direct
dateformat@1.0.12 — direct
get-pkg-repo@1.4.0 — direct
git-raw-commits@1.3.6 — direct
git-remote-origin-url@2.0.0 — direct
git-semver-tags@1.3.6 — direct
lodash@4.18.1 — direct
normalize-package-data@2.5.0 — direct
q@1.5.1 — direct
read-pkg@1.1.0 — direct
read-pkg-up@1.0.1 — direct
through2@2.0.5 — direct
compare-func@1.3.4 — indirect
conventional-commits-filter@1.1.6 — indirect
handlebars@4.7.10 — indirect
json-stringify-safe@5.0.1 — indirect
meow@3.7.0 — indirect
semver@5.7.2 — indirect
split@1.0.1 — indirect
JSONStream@1.3.5 — indirect
is-text-path@1.0.1 — indirect
meow@4.0.1 — indirect
split2@2.2.0 — indirect
trim-off-newlines@1.0.3 — indirect
get-stdin@4.0.1 — indirect
hosted-git-info@2.8.9 — indirect
parse-github-repo-url@1.4.1 — indirect
dargs@4.1.0 — indirect
lodash.template@4.18.1 — indirect
meow@4.0.1 — indirect
gitconfiglocal@1.0.0 — indirect
pify@2.3.0 — indirect
meow@4.0.1 — indirect
resolve@1.22.13 — indirect
validate-npm-package-license@3.0.4 — indirect
load-json-file@1.1.0 — indirect
path-type@1.1.0 — indirect
find-up@1.1.2 — indirect
readable-stream@2.3.8 — indirect
xtend@4.0.2 — indirect
array-ify@1.0.0 — indirect
dot-prop@3.0.0 — indirect
is-subset@0.1.1 — indirect
modify-values@1.0.1 — indirect
minimist@1.2.8 — indirect
neo-async@2.6.2 — indirect
source-map@0.6.1 — indirect
uglify-js@3.19.3 — indirect
wordwrap@1.0.0 — indirect
camelcase-keys@2.1.0 — indirect
decamelize@1.2.0 — indirect
loud-rejection@1.6.0 — indirect
map-obj@1.0.1 — indirect
object-assign@4.1.1 — indirect
redent@1.0.0 — indirect
trim-newlines@1.0.0 — indirect
through@2.3.8 — indirect
jsonparse@1.3.1 — indirect
text-extensions@1.9.0 — indirect
camelcase-keys@4.2.0 — indirect
decamelize-keys@1.1.1 — indirect
minimist-options@3.0.2 — indirect
read-pkg-up@3.0.0 — indirect
redent@2.0.0 — indirect
trim-newlines@2.0.0 — indirect
number-is-nan@1.0.1 — indirect
lodash._reinterpolate@3.0.0 — indirect
lodash.templatesettings@4.2.0 — indirect
camelcase-keys@4.2.0 — indirect
read-pkg-up@3.0.0 — indirect
redent@2.0.0 — indirect
trim-newlines@2.0.0 — indirect
ini@1.3.8 — indirect
camelcase-keys@4.2.0 — indirect
read-pkg-up@3.0.0 — indirect
redent@2.0.0 — indirect
trim-newlines@2.0.0 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
graceful-fs@4.2.11 — indirect
parse-json@2.2.0 — indirect
pinkie-promise@2.0.1 — indirect
strip-bom@2.0.0 — indirect
path-exists@2.1.0 — indirect
core-util-is@1.0.3 — indirect
inherits@2.0.4 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
is-obj@1.0.1 — indirect
camelcase@2.1.1 — indirect
currently-unhandled@0.4.1 — indirect
signal-exit@3.0.7 — indirect
indent-string@2.1.0 — indirect
strip-indent@1.0.1 — indirect
camelcase@4.1.0 — indirect
map-obj@2.0.0 — indirect
quick-lru@1.1.0 — indirect
arrify@1.0.1 — indirect
is-plain-obj@1.1.0 — indirect
find-up@2.1.0 — indirect
read-pkg@3.0.0 — indirect
indent-string@3.2.0 — indirect
strip-indent@2.0.0 — indirect
camelcase@4.1.0 — indirect
map-obj@2.0.0 — indirect
find-up@2.1.0 — indirect
read-pkg@3.0.0 — indirect
indent-string@3.2.0 — indirect
strip-indent@2.0.0 — indirect
camelcase@4.1.0 — indirect
map-obj@2.0.0 — indirect
find-up@2.1.0 — indirect
read-pkg@3.0.0 — indirect
indent-string@3.2.0 — indirect
strip-indent@2.0.0 — indirect
hasown@2.0.4 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
error-ex@1.3.4 — indirect
pinkie@2.0.4 — indirect
is-utf8@0.2.1 — indirect
array-find-index@1.0.2 — indirect
repeating@2.0.1 — indirect
locate-path@2.0.0 — indirect
load-json-file@4.0.0 — indirect
path-type@3.0.0 — indirect
load-json-file@4.0.0 — indirect
path-type@3.0.0 — indirect
load-json-file@4.0.0 — indirect
path-type@3.0.0 — indirect
function-bind@1.1.2 — indirect
is-arrayish@0.2.1 — indirect
is-finite@1.1.0 — indirect
p-locate@2.0.0 — indirect
path-exists@3.0.0 — indirect
parse-json@4.0.0 — indirect
pify@3.0.0 — indirect
strip-bom@3.0.0 — indirect
parse-json@4.0.0 — indirect
pify@3.0.0 — indirect
strip-bom@3.0.0 — indirect
parse-json@4.0.0 — indirect
pify@3.0.0 — indirect
strip-bom@3.0.0 — indirect
p-limit@1.3.0 — indirect
json-parse-better-errors@1.0.2 — indirect
p-try@1.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	1/10 — Found 2/18 approved changesets -- score normalized to 1
Maintained	10/10 — 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
Security-Policy	0/10 — security policy file not detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/conventional-changelog-core/1.9.5 — retrieved 2026-10-29T08:19:22.940Z
https://api.deps.dev/v3/systems/npm/packages/conventional-changelog-core/versions/1.9.5 — retrieved 2026-10-29T08:19:23.466Z
https://api.deps.dev/v3/systems/npm/packages/conventional-changelog-core/versions/1.9.5:dependencies — retrieved 2026-10-29T08:19:23.478Z
https://api.deps.dev/v3/projects/github.com%2Fconventional-changelog%2Fconventional-changelog — retrieved 2026-10-29T08:18:37.756Z