not-bundled-npm

a package manager for JavaScript

not-bundled-npm@5.5.1 was published on 2017-11-13. Its manifest declares 94 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

All not-bundled-npm versions · Permanent reference to 5.5.1

Package specifications

Version	5.5.1
License declaration	Artistic-2.0
Published	2017-11-13T06:22:32.006Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	94
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	./lib/npm.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	424
Repository stars	17615
Repository forks	2974

Install not-bundled-npm 5.5.1

npm install not-bundled-npm@5.5.1
pnpm add not-bundled-npm@5.5.1
yarn add not-bundled-npm@5.5.1

Runtime dependencies

JSONStream ~1.3.1
abbrev ~1.1.1
ansi-regex ~3.0.0
ansicolors ~0.3.2
ansistyles ~0.1.3
aproba ~1.2.0
archy ~1.0.0
bluebird ~3.5.0
cacache ~9.2.9
call-limit ~1.1.0
chownr ~1.0.1
cli-table2 ~0.2.0
cmd-shim ~2.0.2
columnify ~1.5.4
config-chain ~1.1.11
detect-indent ~5.0.0
dezalgo ~1.0.3
editor ~1.0.0
fs-vacuum ~1.2.10
fs-write-stream-atomic ~1.0.10
glob ~7.1.2
graceful-fs ~4.1.11
has-unicode ~2.0.1
hosted-git-info ~2.5.0
iferr ~0.1.5
inflight ~1.0.6
inherits ~2.0.3
ini ~1.3.4
init-package-json ~1.10.1
is-cidr ~1.0.0
lazy-property ~1.0.0
libnpx ~9.6.0
lockfile ~1.0.3
lodash._baseuniq ~4.6.0
lodash.clonedeep ~4.5.0
lodash.union ~4.6.0
lodash.uniq ~4.5.0
lodash.without ~4.4.0
lru-cache ~4.1.1
meant ~1.0.1
mississippi ~1.3.0
mkdirp ~0.5.1
move-concurrently ~1.0.1
node-gyp ~3.6.2
nopt ~4.0.1
normalize-package-data ~2.4.0
npm-cache-filename ~1.0.2
npm-install-checks ~3.0.0
npm-lifecycle ~1.0.3
npm-package-arg ~5.1.2
npm-packlist ~1.1.9
npm-profile ~2.0.4
npm-registry-client ~8.5.0
npm-user-validate ~1.0.0
npmlog ~4.1.2
once ~1.4.0
opener ~1.4.3
osenv ~0.1.4
pacote ~6.0.2
path-is-inside ~1.0.2
promise-inflight ~1.0.1
qrcode-terminal ~0.11.0
query-string ~5.0.0
qw ~1.0.1
read ~1.0.7
read-cmd-shim ~1.0.1
read-installed ~4.0.3
read-package-json ~2.0.12
read-package-tree ~5.1.6
readable-stream ~2.3.3
request ~2.83.0
retry ~0.10.1
rimraf ~2.6.2
safe-buffer ~5.1.1
semver ~5.4.1
sha ~2.0.1
slide ~1.1.6
sorted-object ~2.0.1
sorted-union-stream ~2.1.3
ssri ~4.1.6
strip-ansi ~4.0.0
tar ~4.0.1
text-table ~0.2.0
uid-number 0.0.6
umask ~1.1.0
unique-filename ~1.1.0
unpipe ~1.0.0
update-notifier ~2.2.0
uuid ~3.1.0
validate-npm-package-name ~3.0.0
which ~1.3.0
worker-farm ~1.5.0
wrappy ~1.0.2
write-file-atomic ~2.1.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

JSONStream@1.3.5 — direct
abbrev@1.1.1 — direct
ansi-regex@3.0.1 — direct
ansicolors@0.3.2 — direct
ansistyles@0.1.3 — direct
aproba@1.2.0 — direct
archy@1.0.0 — direct
bluebird@3.5.5 — direct
cacache@9.2.9 — direct
call-limit@1.1.1 — direct
chownr@1.0.1 — direct
cli-table2@0.2.0 — direct
cmd-shim@2.0.2 — direct
columnify@1.5.4 — direct
config-chain@1.1.13 — direct
detect-indent@5.0.0 — direct
dezalgo@1.0.4 — direct
editor@1.0.0 — direct
fs-vacuum@1.2.10 — direct
fs-write-stream-atomic@1.0.10 — direct
glob@7.1.7 — direct
graceful-fs@4.1.15 — direct
has-unicode@2.0.1 — direct
hosted-git-info@2.5.0 — direct
iferr@0.1.5 — direct
inflight@1.0.6 — direct
inherits@2.0.4 — direct
ini@1.3.8 — direct
init-package-json@1.10.3 — direct
is-cidr@1.0.0 — direct
lazy-property@1.0.0 — direct
libnpx@9.6.0 — direct
lockfile@1.0.4 — direct
lodash._baseuniq@4.6.0 — direct
lodash.clonedeep@4.5.0 — direct
lodash.union@4.6.0 — direct
lodash.uniq@4.5.0 — direct
lodash.without@4.4.0 — direct
lru-cache@4.1.5 — direct
meant@1.0.3 — direct
mississippi@1.3.1 — direct
mkdirp@0.5.6 — direct
move-concurrently@1.0.1 — direct
node-gyp@3.6.3 — direct
nopt@4.0.3 — direct
normalize-package-data@2.4.2 — direct
npm-cache-filename@1.0.2 — direct
npm-install-checks@3.0.2 — direct
npm-lifecycle@1.0.3 — direct
npm-package-arg@5.1.2 — direct
npm-packlist@1.1.12 — direct
npm-profile@2.0.5 — direct
npm-registry-client@8.5.1 — direct
npm-user-validate@1.0.1 — direct
npmlog@4.1.2 — direct
once@1.4.0 — direct
opener@1.4.3 — direct
osenv@0.1.5 — direct
pacote@6.0.4 — direct
path-is-inside@1.0.2 — direct
promise-inflight@1.0.1 — direct
qrcode-terminal@0.11.0 — direct
query-string@5.0.1 — direct
qw@1.0.2 — direct
read@1.0.7 — direct
read-cmd-shim@1.0.5 — direct
read-installed@4.0.3 — direct
read-package-json@2.0.13 — direct
read-package-tree@5.1.6 — direct
readable-stream@2.3.8 — direct
request@2.83.0 — direct
retry@0.10.1 — direct
rimraf@2.6.3 — direct
safe-buffer@5.1.2 — direct
semver@5.4.1 — direct
sha@2.0.1 — direct
slide@1.1.6 — direct
sorted-object@2.0.1 — direct
sorted-union-stream@2.1.3 — direct
ssri@4.1.6 — direct
strip-ansi@4.0.0 — direct
tar@4.0.2 — direct
text-table@0.2.0 — direct
uid-number@0.0.6 — direct
umask@1.1.0 — direct
unique-filename@1.1.1 — direct
unpipe@1.0.0 — direct
update-notifier@2.2.0 — direct
uuid@3.1.0 — direct
validate-npm-package-name@3.0.0 — direct
which@1.3.1 — direct
worker-farm@1.5.4 — direct
wrappy@1.0.2 — direct
write-file-atomic@2.1.0 — direct
jsonparse@1.3.1 — indirect
through@2.3.8 — indirect
y18n@3.2.2 — indirect
colors@1.4.0 — indirect
lodash@3.10.1 — indirect
string-width@1.0.2 — indirect
strip-ansi@3.0.1 — indirect
wcwidth@1.0.1 — indirect
proto-list@1.2.4 — indirect
asap@2.0.6 — indirect
imurmurhash@0.1.4 — indirect
fs.realpath@1.0.0 — indirect
minimatch@3.1.5 — indirect
path-is-absolute@1.0.1 — indirect
promzard@0.3.0 — indirect
validate-npm-package-license@3.0.4 — indirect
cidr-regex@1.0.6 — indirect
dotenv@4.0.0 — indirect
yargs@8.0.2 — indirect
signal-exit@3.0.7 — indirect
lodash._createset@4.0.3 — indirect
lodash._root@3.0.1 — indirect
pseudomap@1.0.2 — indirect
yallist@2.1.2 — indirect
concat-stream@1.6.2 — indirect
duplexify@3.7.1 — indirect
end-of-stream@1.4.5 — indirect
flush-write-stream@1.1.1 — indirect
from2@2.3.0 — indirect
parallel-transform@1.2.0 — indirect
pump@1.0.3 — indirect
pumpify@1.5.1 — indirect
stream-each@1.2.3 — indirect
through2@2.0.5 — indirect
minimist@1.2.8 — indirect
copy-concurrently@1.0.5 — indirect
run-queue@1.0.3 — indirect
fstream@1.0.12 — indirect
nopt@3.0.6 — indirect
request@2.81.0 — indirect
semver@5.3.0 — indirect
tar@2.2.2 — indirect
is-builtin-module@1.0.0 — indirect
ignore-walk@3.0.4 — indirect
npm-bundled@1.1.2 — indirect
make-fetch-happen@2.6.0 — indirect
ssri@5.3.0 — indirect
are-we-there-yet@1.1.7 — indirect
console-control-strings@1.1.0 — indirect
gauge@2.7.4 — indirect
set-blocking@2.0.0 — indirect
os-homedir@1.0.2 — indirect
os-tmpdir@1.0.2 — indirect
npm-pick-manifest@1.0.4 — indirect
promise-retry@1.1.1 — indirect
protoduck@4.0.0 — indirect
decode-uri-component@0.2.2 — indirect
object-assign@4.1.1 — indirect
strict-uri-encode@1.1.0 — indirect
mute-stream@0.0.8 — indirect
debuglog@1.0.1 — indirect
readdir-scoped-modules@1.1.0 — indirect
util-extend@1.0.3 — indirect
json-parse-better-errors@1.0.2 — indirect
slash@1.0.0 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
aws-sign2@0.7.0 — indirect
aws4@1.13.2 — indirect
caseless@0.12.0 — indirect
combined-stream@1.0.8 — indirect
extend@3.0.2 — indirect
forever-agent@0.6.1 — indirect
form-data@2.3.3 — indirect
har-validator@5.0.3 — indirect
hawk@6.0.2 — indirect
http-signature@1.2.0 — indirect
is-typedarray@1.0.0 — indirect
isstream@0.1.2 — indirect
json-stringify-safe@5.0.1 — indirect
mime-types@2.1.35 — indirect
oauth-sign@0.8.2 — indirect
performance-now@2.1.0 — indirect
qs@6.5.5 — indirect
stringstream@0.0.6 — indirect
tough-cookie@2.3.4 — indirect
tunnel-agent@0.6.0 — indirect
from2@1.3.0 — indirect
stream-iterate@1.2.0 — indirect
minipass@2.9.0 — indirect
minizlib@1.3.3 — indirect
yallist@3.1.1 — indirect
unique-slug@2.0.2 — indirect
boxen@1.3.0 — indirect
chalk@1.1.3 — indirect
configstore@3.1.5 — indirect
import-lazy@2.1.0 — indirect
is-npm@1.0.0 — indirect
latest-version@3.1.0 — indirect
semver-diff@2.1.0 — indirect
xdg-basedir@3.0.0 — indirect
builtins@1.0.3 — indirect
isexe@2.0.0 — indirect
errno@0.1.8 — indirect
xtend@4.0.2 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
strip-ansi@3.0.1 — indirect
ansi-regex@2.1.1 — indirect
defaults@1.0.4 — indirect
brace-expansion@1.1.21 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
camelcase@4.1.0 — indirect
cliui@3.2.0 — indirect
decamelize@1.2.0 — indirect
get-caller-file@1.0.3 — indirect
os-locale@2.1.0 — indirect
read-pkg-up@2.0.0 — indirect
require-directory@2.1.1 — indirect
require-main-filename@1.0.1 — indirect
string-width@2.1.1 — indirect
which-module@2.0.1 — indirect
yargs-parser@7.0.0 — indirect
buffer-from@1.1.2 — indirect
typedarray@0.0.6 — indirect
stream-shift@1.0.3 — indirect
cyclist@1.0.2 — indirect
pump@2.0.1 — indirect
aws-sign2@0.6.0 — indirect
form-data@2.1.4 — indirect
har-validator@4.2.1 — indirect
hawk@3.1.3 — indirect
http-signature@1.1.1 — indirect
performance-now@0.2.0 — indirect
qs@6.4.3 — indirect
block-stream@0.0.9 — indirect
builtin-modules@1.1.1 — indirect
npm-normalize-package-bin@1.0.1 — indirect
agentkeepalive@3.5.3 — indirect
cacache@10.0.4 — indirect
http-cache-semantics@3.8.1 — indirect
http-proxy-agent@2.1.0 — indirect
https-proxy-agent@2.2.4 — indirect
node-fetch-npm@2.0.4 — indirect
socks-proxy-agent@3.0.1 — indirect
ssri@5.3.0 — indirect
delegates@1.0.0 — indirect
strip-ansi@3.0.1 — indirect
wide-align@1.1.5 — indirect
err-code@1.1.2 — indirect
genfun@4.0.1 — indirect
delayed-stream@1.0.0 — indirect
asynckit@0.4.0 — indirect
ajv@5.5.2 — indirect
har-schema@2.0.0 — indirect
boom@4.3.1 — indirect
cryptiles@3.2.1 — indirect
hoek@4.3.1 — indirect
sntp@2.1.0 — indirect
assert-plus@1.0.0 — indirect
jsprim@1.4.2 — indirect
sshpk@1.18.0 — indirect
mime-db@1.52.0 — indirect
punycode@1.4.1 — indirect
readable-stream@1.1.14 — indirect
yallist@3.1.1 — indirect
ansi-align@2.0.0 — indirect
chalk@2.4.2 — indirect
cli-boxes@1.0.0 — indirect
string-width@2.1.1 — indirect
term-size@1.2.0 — indirect
widest-line@2.0.1 — indirect
ansi-styles@2.2.1 — indirect
escape-string-regexp@1.0.5 — indirect
has-ansi@2.0.0 — indirect
strip-ansi@3.0.1 — indirect
supports-color@2.0.0 — indirect
dot-prop@4.2.1 — indirect
make-dir@1.3.0 — indirect
unique-string@1.0.0 — indirect
package-json@4.0.1 — indirect
prr@1.0.1 — indirect
number-is-nan@1.0.1 — indirect
ansi-regex@2.1.1 — indirect
clone@1.0.4 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
strip-ansi@3.0.1 — indirect
wrap-ansi@2.1.0 — indirect
execa@0.7.0 — indirect
lcid@1.0.0 — indirect
mem@1.1.0 — indirect
find-up@2.1.0 — indirect
read-pkg@2.0.0 — indirect
is-fullwidth-code-point@2.0.0 — indirect
ajv@4.11.8 — indirect
har-schema@1.0.5 — indirect
boom@2.10.1 — indirect
cryptiles@2.0.5 — indirect
hoek@2.16.3 — indirect
sntp@1.0.9 — indirect
assert-plus@0.2.0 — indirect
humanize-ms@1.2.1 — indirect
mississippi@2.0.0 — indirect
y18n@4.0.3 — indirect
agent-base@4.3.0 — indirect
debug@3.1.0 — indirect
encoding@0.1.14 — indirect
socks@1.1.10 — indirect
ansi-regex@2.1.1 — indirect
co@4.6.0 — indirect
fast-deep-equal@1.1.0 — indirect
fast-json-stable-stringify@2.1.0 — indirect
json-schema-traverse@0.3.1 — indirect
boom@5.3.3 — indirect
assert-plus@1.0.0 — indirect
extsprintf@1.3.0 — indirect
json-schema@0.4.0 — indirect
verror@1.10.0 — indirect
asn1@0.2.6 — indirect
assert-plus@1.0.0 — indirect
bcrypt-pbkdf@1.0.2 — indirect
dashdash@1.14.1 — indirect
ecc-jsbn@0.1.2 — indirect
getpass@0.1.7 — indirect
jsbn@0.1.1 — indirect
safer-buffer@2.1.2 — indirect
tweetnacl@0.14.5 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
string-width@2.1.1 — indirect
ansi-styles@3.2.1 — indirect
supports-color@5.5.0 — indirect
is-fullwidth-code-point@2.0.0 — indirect
string-width@2.1.1 — indirect
ansi-regex@2.1.1 — indirect
ansi-regex@2.1.1 — indirect
is-obj@1.0.1 — indirect
pify@3.0.0 — indirect
crypto-random-string@1.0.0 — indirect
got@6.7.1 — indirect
registry-auth-token@3.4.0 — indirect
registry-url@3.1.0 — indirect
ansi-regex@2.1.1 — indirect
strip-ansi@3.0.1 — indirect
cross-spawn@5.1.0 — indirect
get-stream@3.0.0 — indirect
is-stream@1.1.0 — indirect
npm-run-path@2.0.2 — indirect
p-finally@1.0.0 — indirect
strip-eof@1.0.0 — indirect
invert-kv@1.0.0 — indirect
mimic-fn@1.2.0 — indirect
locate-path@2.0.0 — indirect
load-json-file@2.0.0 — indirect
path-type@2.0.0 — indirect
json-stable-stringify@1.3.0 — indirect
ms@2.1.3 — indirect
pump@2.0.1 — indirect
es6-promisify@5.0.0 — indirect
ms@2.0.0 — indirect
iconv-lite@0.7.3 — indirect
ip@1.1.9 — indirect
smart-buffer@1.1.15 — indirect
assert-plus@1.0.0 — indirect
core-util-is@1.0.2 — indirect
assert-plus@1.0.0 — indirect
assert-plus@1.0.0 — indirect
is-fullwidth-code-point@2.0.0 — indirect
color-convert@1.9.3 — indirect
has-flag@3.0.0 — indirect
is-fullwidth-code-point@2.0.0 — indirect
create-error-class@3.0.2 — indirect
duplexer3@0.1.5 — indirect
is-redirect@1.0.0 — indirect
is-retry-allowed@1.2.0 — indirect
lowercase-keys@1.0.1 — indirect
timed-out@4.0.1 — indirect
unzip-response@2.0.1 — indirect
url-parse-lax@1.0.0 — indirect
rc@1.2.8 — indirect
ansi-regex@2.1.1 — indirect
shebang-command@1.2.0 — indirect
path-key@2.0.1 — indirect
p-locate@2.0.0 — indirect
path-exists@3.0.0 — indirect
parse-json@2.2.0 — indirect
pify@2.3.0 — indirect
strip-bom@3.0.0 — indirect
pify@2.3.0 — indirect
call-bind@1.0.9 — indirect
call-bound@1.0.4 — indirect
isarray@2.0.5 — indirect
jsonify@0.0.1 — indirect
object-keys@1.1.1 — indirect
es6-promise@4.2.8 — indirect
color-name@1.1.3 — indirect
capture-stack-trace@1.0.2 — indirect
prepend-http@1.0.4 — indirect
deep-extend@0.6.0 — indirect
strip-json-comments@2.0.1 — indirect
shebang-regex@1.0.0 — indirect
p-limit@1.3.0 — indirect
error-ex@1.3.4 — indirect
call-bind-apply-helpers@1.0.2 — indirect
es-define-property@1.0.1 — indirect
get-intrinsic@1.3.1 — indirect
set-function-length@1.2.2 — indirect
p-try@1.0.0 — indirect
is-arrayish@0.2.1 — indirect
es-errors@1.3.0 — indirect
function-bind@1.1.2 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
es-object-atoms@1.1.2 — indirect
generator-function@2.0.1 — indirect
get-proto@1.0.1 — indirect
gopd@1.2.0 — indirect
has-symbols@1.1.0 — indirect
hasown@2.0.4 — indirect
math-intrinsics@1.1.0 — indirect
define-data-property@1.1.4 — indirect
has-property-descriptors@1.0.2 — indirect
dunder-proto@1.0.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Binary-Artifacts	10/10 — no binaries found in the repo
Maintained	0/10 — project is archived
Code-Review	3/10 — Found 11/30 approved changesets -- score normalized to 3
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
License	0/10 — license file not detected
Fuzzing	0/10 — project is not fuzzed
Security-Policy	0/10 — security policy file not detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/not-bundled-npm/5.5.1 — retrieved 2026-10-31T21:22:04.573Z
https://api.deps.dev/v3/systems/npm/packages/not-bundled-npm/versions/5.5.1 — retrieved 2026-10-31T21:22:04.983Z
https://api.deps.dev/v3/systems/npm/packages/not-bundled-npm/versions/5.5.1:dependencies — retrieved 2026-10-31T21:22:05.029Z
https://api.deps.dev/v3/projects/github.com%2Fnpm%2Fnpm — retrieved 2026-10-29T10:52:53.636Z (stale snapshot; refresh pending)