jscodeshift 0.3.17
A toolkit for JavaScript codemods
jscodeshift@0.3.17 was published on 2016-03-17. Its manifest declares 10 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.
All jscodeshift versions · Permanent reference to 0.3.17 · Latest release
Package specifications
| Version | 0.3.17 |
|---|---|
| License declaration | BSD-3-Clause |
| Published | 2016-03-17T23:17:06.105Z |
| Node.js requirement | Not declared |
| Type declarations | Not declared |
| Runtime dependency count | 10 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | Not supplied |
| Published file count | Not supplied |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | index.js |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 159 |
| Repository stars | 10042 |
| Repository forks | 502 |
Install jscodeshift 0.3.17
npm install jscodeshift@0.3.17 pnpm add jscodeshift@0.3.17 yarn add jscodeshift@0.3.17
Runtime dependencies
- temp ^0.8.1
- async ^1.5.0
- lodash ^3.5.0
- nomnom ^1.8.1
- recast ^0.11.0
- node-dir 0.1.8
- cli-color ^1.0.0
- babel-core ^5.8.21
- es6-promise ^3.0.0
- babel-runtime ^5.6.18
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- acorn@5.7.4 — indirect
- align-text@0.1.4 — indirect
- alter@0.2.0 — indirect
- amdefine@1.0.1 — indirect
- ansi-regex@2.1.1 — indirect
- ansi-styles@1.0.0 — indirect
- ansi-styles@2.2.1 — indirect
- ast-traverse@0.1.1 — indirect
- ast-types@0.8.12 — indirect
- ast-types@0.8.15 — indirect
- ast-types@0.9.6 — indirect
- async@1.5.2 — direct
- babel-core@5.8.38 — direct
- babel-plugin-constant-folding@1.0.1 — indirect
- babel-plugin-dead-code-elimination@1.0.2 — indirect
- babel-plugin-eval@1.0.1 — indirect
- babel-plugin-inline-environment-variables@1.0.1 — indirect
- babel-plugin-jscript@1.0.4 — indirect
- babel-plugin-member-expression-literals@1.0.1 — indirect
- babel-plugin-property-literals@1.0.1 — indirect
- babel-plugin-proto-to-assign@1.0.4 — indirect
- babel-plugin-react-constant-elements@1.0.3 — indirect
- babel-plugin-react-display-name@1.0.3 — indirect
- babel-plugin-remove-console@1.0.1 — indirect
- babel-plugin-remove-debugger@1.0.1 — indirect
- babel-plugin-runtime@1.0.7 — indirect
- babel-plugin-undeclared-variables-check@1.0.2 — indirect
- babel-plugin-undefined-to-void@1.1.6 — indirect
- babel-runtime@5.8.38 — direct
- babylon@5.8.38 — indirect
- balanced-match@1.0.2 — indirect
- bluebird@2.11.0 — indirect
- brace-expansion@1.1.21 — indirect
- breakable@1.0.0 — indirect
- camelcase@1.2.1 — indirect
- center-align@0.1.3 — indirect
- chalk@0.4.0 — indirect
- chalk@1.1.3 — indirect
- cli-color@1.4.0 — direct
- cliui@2.1.0 — indirect
- commander@2.20.3 — indirect
- commoner@0.10.8 — indirect
- concat-map@0.0.1 — indirect
- convert-source-map@1.9.0 — indirect
- core-js@1.2.7 — indirect
- d@1.0.2 — indirect
- debug@2.6.9 — indirect
- decamelize@1.2.0 — indirect
- defined@1.0.1 — indirect
- defs@1.1.1 — indirect
- detect-indent@3.0.1 — indirect
- detective@4.7.1 — indirect
- es-errors@1.3.0 — indirect
- es5-ext@0.10.64 — indirect
- es6-iterator@2.0.3 — indirect
- es6-promise@3.3.1 — direct
- es6-symbol@3.1.4 — indirect
- es6-weak-map@2.0.3 — indirect
- escape-string-regexp@1.0.5 — indirect
- esniff@2.0.1 — indirect
- esprima@2.7.3 — indirect
- esprima@3.1.3 — indirect
- esprima-fb@15001.1001.0-dev-harmony-fb — indirect
- esutils@2.0.3 — indirect
- event-emitter@0.3.5 — indirect
- ext@1.7.0 — indirect
- fs-readdir-recursive@0.1.2 — indirect
- fs.realpath@1.0.0 — indirect
- function-bind@1.1.2 — indirect
- get-stdin@4.0.1 — indirect
- glob@5.0.15 — indirect
- glob@7.2.3 — indirect
- globals@6.4.1 — indirect
- graceful-fs@4.2.11 — indirect
- has-ansi@2.0.0 — indirect
- has-color@0.1.7 — indirect
- hasown@2.0.4 — indirect
- home-or-tmp@1.0.0 — indirect
- iconv-lite@0.4.24 — indirect
- inflight@1.0.6 — indirect
- inherits@2.0.4 — indirect
- invert-kv@1.0.0 — indirect
- is-buffer@1.1.6 — indirect
- is-core-module@2.17.0 — indirect
- is-finite@1.1.0 — indirect
- is-integer@1.0.7 — indirect
- is-promise@2.2.2 — indirect
- js-tokens@1.0.1 — indirect
- jsesc@0.5.0 — indirect
- json5@0.4.0 — indirect
- kind-of@3.2.2 — indirect
- lazy-cache@1.0.4 — indirect
- lcid@1.0.0 — indirect
- leven@1.0.2 — indirect
- lodash@3.10.1 — direct
- longest@1.0.1 — indirect
- lru-queue@0.1.0 — indirect
- memoizee@0.4.17 — indirect
- minimatch@2.0.10 — indirect
- minimatch@3.1.5 — indirect
- minimist@1.2.8 — indirect
- mkdirp@0.5.6 — indirect
- ms@2.0.0 — indirect
- next-tick@1.1.0 — indirect
- node-dir@0.1.8 — direct
- nomnom@1.8.1 — direct
- object-assign@4.1.1 — indirect
- once@1.4.0 — indirect
- os-locale@1.4.0 — indirect
- os-tmpdir@1.0.2 — indirect
- output-file-sync@1.1.2 — indirect
- path-exists@1.0.0 — indirect
- path-is-absolute@1.0.1 — indirect
- path-parse@1.0.7 — indirect
- private@0.1.8 — indirect
- q@1.5.1 — indirect
- recast@0.10.33 — indirect
- recast@0.10.43 — indirect
- recast@0.11.23 — direct
- regenerate@1.5.0 — indirect
- regenerator@0.8.40 — indirect
- regexpu@1.3.0 — indirect
- regjsgen@0.2.0 — indirect
- regjsparser@0.1.5 — indirect
- repeat-string@1.6.1 — indirect
- repeating@1.1.3 — indirect
- resolve@1.22.13 — indirect
- right-align@0.1.3 — indirect
- rimraf@2.6.3 — indirect
- safer-buffer@2.1.2 — indirect
- shebang-regex@1.0.0 — indirect
- simple-fmt@0.1.0 — indirect
- simple-is@0.2.0 — indirect
- slash@1.0.0 — indirect
- source-map@0.1.32 — indirect
- source-map@0.5.7 — indirect
- source-map-support@0.2.10 — indirect
- stable@0.1.8 — indirect
- stringmap@0.2.2 — indirect
- stringset@0.2.1 — indirect
- strip-ansi@0.1.1 — indirect
- strip-ansi@3.0.1 — indirect
- supports-color@2.0.0 — indirect
- supports-preserve-symlinks-flag@1.0.0 — indirect
- temp@0.8.4 — direct
- through@2.3.8 — indirect
- timers-ext@0.1.8 — indirect
- to-fast-properties@1.0.3 — indirect
- trim-right@1.0.1 — indirect
- try-resolve@1.0.1 — indirect
- tryor@0.1.2 — indirect
- type@2.7.3 — indirect
- underscore@1.6.0 — indirect
- user-home@1.1.1 — indirect
- window-size@0.1.4 — indirect
- wordwrap@0.0.2 — indirect
- wrappy@1.0.2 — indirect
- y18n@3.2.2 — indirect
- yargs@3.27.0 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 9/10 — Found 10/11 approved changesets -- score normalized to 9 |
|---|---|
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Maintained | 6/10 — 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| Token-Permissions | 0/10 — detected GitHub workflow tokens with excessive permissions |
| Pinned-Dependencies | 0/10 — dependency not pinned by hash detected -- score normalized to 0 |
| Fuzzing | 0/10 — project is not fuzzed |
| License | 10/10 — license file detected |
| Branch-Protection | 0/10 — branch protection not enabled on development/release branches |
| Security-Policy | 9/10 — security policy file detected |
| SAST | 2/10 — SAST tool is not run on all commits -- score normalized to 2 |
Evidence and freshness
- https://registry.npmjs.org/jscodeshift/0.3.17 — retrieved 2026-10-31T08:39:27.861Z
- https://api.deps.dev/v3/projects/github.com%2Ffacebook%2Fjscodeshift — retrieved 2026-10-31T05:09:35.193Z
- https://api.deps.dev/v3/systems/npm/packages/jscodeshift/versions/0.3.17 — retrieved 2026-10-31T08:39:28.264Z
- https://api.deps.dev/v3/systems/npm/packages/jscodeshift/versions/0.3.17:dependencies — retrieved 2026-10-31T08:39:28.286Z