npm 1.3.26

A package manager for node

npm@1.3.26 was published on 2014-02-03. Its manifest declares 47 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.6.

All npm versions · Permanent reference to 1.3.26 · Latest release

Package specifications

Version	1.3.26
License declaration	Artistic-2.0
Published	2014-02-03T04:22:50.866Z
Node.js requirement	>=0.6
Type declarations	Not declared
Runtime dependency count	47
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	./lib/npm.js
Side effects declaration	Not declared
Direct advisories	6
Resolved graph dependencies	104
Repository stars	10218
Repository forks	4926

Install npm 1.3.26

npm install npm@1.3.26
pnpm add npm@1.3.26
yarn add npm@1.3.26

Runtime dependencies

ini ~1.1.0
sha ~1.2.1
tar ~0.1.19
ansi ~0.2.1
glob ~3.2.6
nopt ~2.1.2
once ~1.3.0
read ~1.0.4
archy 0
osenv 0
retry ~0.6.0
slide ~1.1.5
which 1
abbrev ~1.0.4
chmodr ~0.1.0
chownr 0
editor 0.0.5
mkdirp ~0.3.5
npmlog 0.0.6
opener ~1.3.0
rimraf ~2.2.5
semver ~2.2.1
fstream ~0.1.25
npmconf ~0.1.12
request ~2.30.0
cmd-shim ~1.1.1
lockfile ~0.4.0
node-gyp ~0.12.2
columnify 0.1.2
lru-cache ~2.5.0
minimatch ~0.2.14
ansicolors ~0.3.2
ansistyles ~0.1.3
text-table ~0.2.0
uid-number 0
fstream-npm ~0.1.6
graceful-fs ~2.0.0
block-stream 0.0.7
path-is-inside ~1.0.0
read-installed ~0.2.2
init-package-json 0.0.14
npm-user-validate 0.0.3
read-package-json ~1.1.6
child-process-close ~0.1.1
github-url-from-git 1.1.1
npm-registry-client ~0.3.5
github-url-from-username-repo 0.0.2

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

ansi-regex@5.0.1 — indirect
aproba@2.1.0 — indirect
are-we-there-yet@4.0.2 — indirect
color-support@1.1.3 — indirect
console-control-strings@1.1.0 — indirect
emoji-regex@8.0.0 — indirect
gauge@5.0.2 — indirect
has-unicode@2.0.1 — indirect
hosted-git-info@10.1.1 — indirect
is-fullwidth-code-point@3.0.0 — indirect
lru-cache@11.5.3 — indirect
normalize-package-data@9.0.0 — direct
npm>1.3.26>abbrev@1.0.4 — direct
npm>1.3.26>ansi@0.2.1 — direct
npm>1.3.26>ansicolors@0.3.2 — direct
npm>1.3.26>ansistyles@0.1.3 — direct
npm>1.3.26>archy@0.0.2 — direct
npm>1.3.26>block-stream@0.0.7 — direct
npm>1.3.26>child-process-close@0.1.1 — direct
npm>1.3.26>chmodr@0.1.0 — direct
npm>1.3.26>chownr@0.0.1 — direct
npm>1.3.26>cmd-shim@1.1.1 — direct
npm>1.3.26>columnify@0.1.2 — direct
npm>1.3.26>editor@0.0.5 — direct
npm>1.3.26>fstream@0.1.25 — direct
npm>1.3.26>fstream-npm@0.1.6 — direct
npm>1.3.26>fstream-npm>fstream-ignore@0.0.7 — indirect
npm>1.3.26>github-url-from-git@1.1.1 — direct
npm>1.3.26>github-url-from-username-repo@0.0.2 — direct
npm>1.3.26>glob@3.2.7 — direct
npm>1.3.26>graceful-fs@2.0.1 — direct
npm>1.3.26>inherits@2.0.1 — direct
npm>1.3.26>ini@1.1.0 — direct
npm>1.3.26>init-package-json@0.0.14 — direct
npm>1.3.26>init-package-json>promzard@0.2.1 — indirect
npm>1.3.26>lockfile@0.4.2 — direct
npm>1.3.26>lru-cache@2.5.0 — direct
npm>1.3.26>minimatch@0.2.14 — direct
npm>1.3.26>minimatch>sigmund@1.0.0 — indirect
npm>1.3.26>mkdirp@0.3.5 — direct
npm>1.3.26>node-gyp@0.12.2 — direct
npm>1.3.26>nopt@2.1.2 — direct
npm>1.3.26>npm-registry-client@0.3.5 — direct
npm>1.3.26>npm-registry-client>couch-login@0.1.20 — indirect
npm>1.3.26>npm-user-validate@0.0.3 — direct
npm>1.3.26>npmconf@0.1.12 — direct
npm>1.3.26>npmconf>config-chain@1.1.8 — indirect
npm>1.3.26>npmconf>config-chain>proto-list@1.2.2 — indirect
npm>1.3.26>npmlog@0.0.6 — direct
npm>1.3.26>once@1.3.0 — direct
npm>1.3.26>opener@1.3.0 — direct
npm>1.3.26>osenv@0.0.3 — direct
npm>1.3.26>path-is-inside@1.0.0 — direct
npm>1.3.26>read@1.0.5 — direct
npm>1.3.26>read-installed@0.2.5 — direct
npm>1.3.26>read-package-json@1.1.6 — direct
npm>1.3.26>read-package-json>normalize-package-data@0.2.8 — indirect
npm>1.3.26>read>mute-stream@0.0.4 — indirect
npm>1.3.26>request@2.30.0 — direct
npm>1.3.26>request>aws-sign2@0.5.0 — indirect
npm>1.3.26>request>forever-agent@0.5.0 — indirect
npm>1.3.26>request>form-data@0.1.2 — indirect
npm>1.3.26>request>form-data>async@0.2.9 — indirect
npm>1.3.26>request>form-data>combined-stream@0.0.4 — indirect
npm>1.3.26>request>form-data>combined-stream>delayed-stream@0.0.5 — indirect
npm>1.3.26>request>hawk@1.0.0 — indirect
npm>1.3.26>request>hawk>boom@0.4.2 — indirect
npm>1.3.26>request>hawk>cryptiles@0.2.2 — indirect
npm>1.3.26>request>hawk>hoek@0.9.1 — indirect
npm>1.3.26>request>hawk>sntp@0.2.4 — indirect
npm>1.3.26>request>http-signature@0.10.0 — indirect
npm>1.3.26>request>http-signature>asn1@0.1.11 — indirect
npm>1.3.26>request>http-signature>assert-plus@0.1.2 — indirect
npm>1.3.26>request>http-signature>ctype@0.5.2 — indirect
npm>1.3.26>request>json-stringify-safe@5.0.0 — indirect
npm>1.3.26>request>mime@1.2.11 — indirect
npm>1.3.26>request>node-uuid@1.4.1 — indirect
npm>1.3.26>request>oauth-sign@0.3.0 — indirect
npm>1.3.26>request>qs@0.6.6 — indirect
npm>1.3.26>request>tough-cookie@0.9.15 — indirect
npm>1.3.26>request>tough-cookie>punycode@1.2.3 — indirect
npm>1.3.26>request>tunnel-agent@0.3.0 — indirect
npm>1.3.26>retry@0.6.0 — direct
npm>1.3.26>rimraf@2.2.6 — direct
npm>1.3.26>semver@2.2.1 — direct
npm>1.3.26>sha@1.2.3 — direct
npm>1.3.26>sha>readable-stream@1.0.24 — indirect
npm>1.3.26>slide@1.1.5 — direct
npm>1.3.26>tar@0.1.19 — direct
npm>1.3.26>text-table@0.2.0 — direct
npm>1.3.26>uid-number@0.0.3 — direct
npm>1.3.26>which@1.0.5 — direct
npmlog@7.0.1 — indirect
semver@7.8.5 — indirect
set-blocking@2.0.0 — indirect
signal-exit@4.1.0 — indirect
spdx-correct@3.2.0 — indirect
spdx-exceptions@2.5.0 — indirect
spdx-expression-parse@3.0.1 — indirect
spdx-license-ids@3.0.24 — indirect
string-width@4.2.3 — indirect
strip-ansi@6.0.1 — indirect
validate-npm-package-license@3.0.4 — indirect
wide-align@1.1.5 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	10/10 — all changesets reviewed
Security-Policy	10/10 — security policy file detected
Maintained	10/10 — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
License	9/10 — license file detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
SAST	9/10 — SAST tool detected but not run on all commits
Fuzzing	0/10 — project is not fuzzed

Evidence and freshness

https://registry.npmjs.org/npm/1.3.26 — retrieved 2026-10-30T02:49:22.076Z
https://api.deps.dev/v3/systems/npm/packages/npm/versions/1.3.26:dependencies — retrieved 2026-10-30T02:49:22.804Z
https://api.deps.dev/v3/systems/npm/packages/npm/versions/1.3.26 — retrieved 2026-10-30T07:04:37.880Z (stale snapshot; refresh pending)
https://api.deps.dev/v3/projects/github.com%2Fnpm%2Fcli — retrieved 2026-10-30T03:40:07.690Z