lighthouse 7.5.0
Automated auditing, performance metrics, and best practices for the web.
lighthouse@7.5.0 was published on 2021-05-18. Its manifest declares 32 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=12.13.0.
All lighthouse versions · Permanent reference to 7.5.0 · Latest release
Package specifications
| Version | 7.5.0 |
|---|---|
| License declaration | Apache-2.0 |
| Published | 2021-05-18T07:32:16.821Z |
| Node.js requirement | >=12.13.0 |
| Type declarations | Not declared |
| Runtime dependency count | 32 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 12279.68 KiB |
| Published file count | 556 |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | ./lighthouse-core/index.js |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 153 |
| Repository stars | 30972 |
| Repository forks | 9778 |
Install lighthouse 7.5.0
npm install lighthouse@7.5.0 pnpm add lighthouse@7.5.0 yarn add lighthouse@7.5.0
Runtime dependencies
- ws 3.3.2
- intl ^1.2.5
- open ^6.4.0
- raven ^2.2.1
- yargs ^16.1.1
- semver ^5.3.0
- jpeg-js ^0.4.1
- ps-list ^7.2.0
- axe-core 4.1.3
- cssstyle 1.2.1
- enquirer ^2.3.6
- lodash.get ^4.4.2
- lodash.set ^4.3.2
- configstore ^5.0.1
- yargs-parser ^20.2.4
- csp_evaluator ^1.0.1
- robots-parser ^2.0.1
- lodash.isequal ^4.5.0
- speedline-core ^1.4.3
- chrome-launcher ^0.13.4
- third-party-web ^0.12.2
- update-notifier ^4.1.0
- http-link-header ^0.8.0
- intl-pluralrules ^1.0.3
- lodash.clonedeep ^4.5.0
- lighthouse-logger ^1.2.0
- intl-messageformat ^4.4.0
- js-library-detector ^6.4.0
- metaviewport-parser 0.2.0
- parse-cache-control 1.0.1
- lookup-closest-locale 6.0.4
- lighthouse-stack-packs ^1.4.0
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- axe-core@4.1.3 — direct
- chrome-launcher@0.13.4 — direct
- configstore@5.0.1 — direct
- csp_evaluator@1.1.8 — direct
- cssstyle@1.2.1 — direct
- enquirer@2.4.1 — direct
- http-link-header@0.8.0 — direct
- intl@1.2.5 — direct
- intl-messageformat@4.4.0 — direct
- intl-pluralrules@1.3.1 — direct
- jpeg-js@0.4.4 — direct
- js-library-detector@6.7.0 — direct
- lighthouse-logger@1.4.2 — direct
- lighthouse-stack-packs@1.12.3 — direct
- lodash.clonedeep@4.5.0 — direct
- lodash.get@4.4.2 — direct
- lodash.isequal@4.5.0 — direct
- lodash.set@4.3.2 — direct
- lookup-closest-locale@6.0.4 — direct
- metaviewport-parser@0.2.0 — direct
- open@6.4.0 — direct
- parse-cache-control@1.0.1 — direct
- ps-list@7.2.0 — direct
- raven@2.6.4 — direct
- robots-parser@2.4.0 — direct
- semver@5.7.2 — direct
- speedline-core@1.4.3 — direct
- third-party-web@0.12.7 — direct
- update-notifier@4.1.3 — direct
- ws@3.3.2 — direct
- yargs@16.2.2 — direct
- yargs-parser@20.2.9 — direct
- @types/node@26.6.6 — indirect
- escape-string-regexp@1.0.5 — indirect
- is-wsl@2.2.0 — indirect
- mkdirp@0.5.6 — indirect
- rimraf@3.0.2 — indirect
- dot-prop@5.3.0 — indirect
- graceful-fs@4.2.11 — indirect
- make-dir@3.1.0 — indirect
- unique-string@2.0.0 — indirect
- write-file-atomic@3.0.3 — indirect
- xdg-basedir@4.0.0 — indirect
- cssom@0.3.8 — indirect
- ansi-colors@4.1.3 — indirect
- strip-ansi@6.0.1 — indirect
- intl-messageformat-parser@1.8.1 — indirect
- debug@2.6.9 — indirect
- marky@1.3.0 — indirect
- is-wsl@1.1.0 — indirect
- cookie@0.3.1 — indirect
- md5@2.3.0 — indirect
- stack-trace@0.0.10 — indirect
- timed-out@4.0.1 — indirect
- uuid@3.3.2 — indirect
- image-ssim@0.2.0 — indirect
- boxen@4.2.0 — indirect
- chalk@3.0.0 — indirect
- has-yarn@2.1.0 — indirect
- import-lazy@2.1.0 — indirect
- is-ci@2.0.0 — indirect
- is-installed-globally@0.3.2 — indirect
- is-npm@4.0.0 — indirect
- is-yarn-global@0.3.0 — indirect
- latest-version@5.1.0 — indirect
- pupa@2.1.1 — indirect
- semver-diff@3.1.1 — indirect
- async-limiter@1.0.1 — indirect
- safe-buffer@5.1.2 — indirect
- ultron@1.1.1 — indirect
- cliui@7.0.4 — indirect
- escalade@3.2.0 — indirect
- get-caller-file@2.0.5 — indirect
- require-directory@2.1.1 — indirect
- string-width@4.2.3 — indirect
- y18n@5.0.8 — indirect
- undici-types@8.9.0 — indirect
- is-docker@2.2.1 — indirect
- minimist@1.2.8 — indirect
- glob@7.2.3 — indirect
- is-obj@2.0.0 — indirect
- semver@6.3.1 — indirect
- crypto-random-string@2.0.0 — indirect
- imurmurhash@0.1.4 — indirect
- is-typedarray@1.0.0 — indirect
- signal-exit@3.0.7 — indirect
- typedarray-to-buffer@3.1.5 — indirect
- ansi-regex@5.0.1 — indirect
- ms@2.0.0 — indirect
- charenc@0.0.2 — indirect
- crypt@0.0.2 — indirect
- is-buffer@1.1.6 — indirect
- ansi-align@3.0.1 — indirect
- camelcase@5.3.1 — indirect
- cli-boxes@2.2.1 — indirect
- term-size@2.2.1 — indirect
- type-fest@0.8.1 — indirect
- widest-line@3.1.0 — indirect
- ansi-styles@4.3.0 — indirect
- supports-color@7.2.0 — indirect
- ci-info@2.0.0 — indirect
- global-dirs@2.1.0 — indirect
- is-path-inside@3.0.3 — indirect
- package-json@6.5.0 — indirect
- escape-goat@2.1.1 — indirect
- semver@6.3.1 — indirect
- wrap-ansi@7.0.0 — indirect
- emoji-regex@8.0.0 — indirect
- is-fullwidth-code-point@3.0.0 — indirect
- fs.realpath@1.0.0 — indirect
- inflight@1.0.6 — indirect
- inherits@2.0.4 — indirect
- minimatch@3.1.5 — indirect
- once@1.4.0 — indirect
- path-is-absolute@1.0.1 — indirect
- color-convert@2.0.1 — indirect
- has-flag@4.0.0 — indirect
- ini@1.3.7 — indirect
- got@9.6.0 — indirect
- registry-auth-token@4.2.2 — indirect
- registry-url@5.1.0 — indirect
- semver@6.3.1 — indirect
- wrappy@1.0.2 — indirect
- brace-expansion@1.1.21 — indirect
- color-name@1.1.4 — indirect
- @sindresorhus/is@0.14.0 — indirect
- @szmarczak/http-timer@1.1.2 — indirect
- cacheable-request@6.1.0 — indirect
- decompress-response@3.3.0 — indirect
- duplexer3@0.1.5 — indirect
- get-stream@4.1.0 — indirect
- lowercase-keys@1.0.1 — indirect
- mimic-response@1.0.1 — indirect
- p-cancelable@1.1.0 — indirect
- to-readable-stream@1.0.0 — indirect
- url-parse-lax@3.0.0 — indirect
- rc@1.2.8 — indirect
- balanced-match@1.0.2 — indirect
- concat-map@0.0.1 — indirect
- defer-to-connect@1.1.3 — indirect
- clone-response@1.0.3 — indirect
- get-stream@5.2.0 — indirect
- http-cache-semantics@4.3.0 — indirect
- keyv@3.1.0 — indirect
- lowercase-keys@2.0.0 — indirect
- normalize-url@4.5.1 — indirect
- responselike@1.0.2 — indirect
- pump@3.0.4 — indirect
- prepend-http@2.0.0 — indirect
- deep-extend@0.6.0 — indirect
- strip-json-comments@2.0.1 — indirect
- json-buffer@3.0.0 — indirect
- end-of-stream@1.4.5 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 4/10 — Found 14/30 approved changesets -- score normalized to 4 |
|---|---|
| Maintained | 10/10 — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| Token-Permissions | 0/10 — detected GitHub workflow tokens with excessive permissions |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| License | 10/10 — license file detected |
| Security-Policy | 0/10 — security policy file not detected |
| Pinned-Dependencies | 1/10 — dependency not pinned by hash detected -- score normalized to 1 |
| Packaging | 10/10 — packaging workflow detected |
| Fuzzing | 0/10 — project is not fuzzed |
| SAST | 9/10 — SAST tool is not run on all commits -- score normalized to 9 |
Evidence and freshness
- https://registry.npmjs.org/lighthouse/7.5.0 — retrieved 2026-11-01T06:46:40.452Z
- https://api.deps.dev/v3/projects/github.com%2FGoogleChrome%2Flighthouse — retrieved 2026-11-01T05:38:03.289Z
- https://api.deps.dev/v3/systems/npm/packages/lighthouse/versions/7.5.0 — retrieved 2026-11-01T06:46:40.931Z
- https://api.deps.dev/v3/systems/npm/packages/lighthouse/versions/7.5.0:dependencies — retrieved 2026-11-01T06:46:40.931Z