npm 3.4.1
a package manager for JavaScript
npm@3.4.1 was published on 2015-11-13. Its manifest declares 83 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.
All npm versions · Permanent reference to 3.4.1 · Latest release
Package specifications
| Version | 3.4.1 |
|---|---|
| License declaration | Artistic-2.0 |
| Published | 2015-11-13T00:56:10.310Z |
| Node.js requirement | Not declared |
| Type declarations | Not declared |
| Runtime dependency count | 83 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | Not supplied |
| Published file count | Not supplied |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | ./lib/npm.js |
| Side effects declaration | Not declared |
| Direct advisories | 6 |
| Resolved graph dependencies | 288 |
| Repository stars | 10218 |
| Repository forks | 4926 |
Install npm 3.4.1
npm install npm@3.4.1 pnpm add npm@3.4.1 yarn add npm@3.4.1
Runtime dependencies
- ini ~1.3.4
- sha ~2.0.1
- tar ~2.2.1
- glob ~5.0.15
- nopt ~3.0.4
- once ~1.3.2
- read ~1.0.7
- archy ~1.0.0
- iferr ~0.1.5
- osenv ~0.1.3
- retry ~0.8.0
- slide ~1.1.6
- umask ~1.1.0
- which ~1.2.0
- abbrev ~1.0.7
- aproba ~1.0.1
- chownr ~1.0.1
- editor ~1.0.0
- mkdirp ~0.5.1
- npmlog ~2.0.0
- opener ~1.4.1
- rimraf ~2.4.3
- semver ~5.0.3
- unpipe ~1.0.0
- wrappy ~1.0.1
- dezalgo ~1.0.3
- fstream ~1.0.8
- request *
- cmd-shim ~2.0.1
- debuglog *
- inflight ~1.0.4
- inherits ~2.0.1
- lockfile ~1.0.1
- node-gyp ~3.0.3
- columnify ~1.5.2
- fs-vacuum ~1.2.7
- ansi-regex *
- ansicolors ~0.3.2
- ansistyles ~0.1.3
- async-some ~1.0.2
- strip-ansi *
- text-table ~0.2.0
- uid-number 0.0.6
- fstream-npm ~1.0.7
- graceful-fs ~4.1.2
- has-unicode ~1.0.1
- lodash.keys *
- lodash.uniq ~3.2.2
- config-chain ~1.1.9
- lodash.union ~3.1.0
- read-cmd-shim ~1.0.1
- sorted-object ~1.0.0
- lodash.isarray *
- lodash.without ~3.2.1
- path-is-inside ~1.0.1
- read-installed ~4.0.3
- hosted-git-info ~2.1.4
- npm-package-arg ~4.1.0
- unique-filename ~1.0.0
- lodash._baseuniq *
- lodash.clonedeep ~3.0.2
- lodash.restparam *
- init-package-json ~1.9.1
- lodash._getnative *
- normalize-git-url ~3.0.1
- npm-user-validate ~0.1.2
- read-package-json ~2.0.2
- read-package-tree ~5.1.2
- write-file-atomic ~1.1.3
- lodash.isarguments *
- npm-cache-filename ~1.0.2
- npm-install-checks ~2.0.1
- lodash._baseindexof *
- lodash._createcache *
- npm-registry-client ~7.0.7
- lodash._bindcallback *
- lodash._cacheindexof *
- fs-write-stream-atomic ~1.0.4
- normalize-package-data ~2.3.5
- readdir-scoped-modules *
- realize-package-specifier ~3.0.1
- validate-npm-package-name ~2.2.2
- validate-npm-package-license *
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- npm>3.4.1>abbrev@1.0.7 — direct
- npm>3.4.1>ansi-regex@2.0.0 — direct
- npm>3.4.1>ansicolors@0.3.2 — direct
- npm>3.4.1>ansistyles@0.1.3 — direct
- npm>3.4.1>aproba@1.0.1 — direct
- npm>3.4.1>archy@1.0.0 — direct
- npm>3.4.1>async-some@1.0.2 — direct
- npm>3.4.1>chownr@1.0.1 — direct
- npm>3.4.1>cmd-shim@2.0.1 — direct
- npm>3.4.1>columnify@1.5.2 — direct
- npm>3.4.1>config-chain@1.1.9 — direct
- npm>3.4.1>debuglog@1.0.1 — direct
- npm>3.4.1>dezalgo@1.0.3 — direct
- npm>3.4.1>editor@1.0.0 — direct
- npm>3.4.1>fs-vacuum@1.2.7 — direct
- npm>3.4.1>fs-write-stream-atomic@1.0.4 — direct
- npm>3.4.1>fstream@1.0.8 — direct
- npm>3.4.1>fstream-npm@1.0.7 — direct
- npm>3.4.1>glob@5.0.15 — direct
- npm>3.4.1>graceful-fs@4.1.2 — direct
- npm>3.4.1>has-unicode@1.0.1 — direct
- npm>3.4.1>hosted-git-info@2.1.4 — direct
- npm>3.4.1>iferr@0.1.5 — direct
- npm>3.4.1>inflight@1.0.4 — direct
- npm>3.4.1>inherits@2.0.1 — direct
- npm>3.4.1>ini@1.3.4 — direct
- npm>3.4.1>init-package-json@1.9.1 — direct
- npm>3.4.1>lockfile@1.0.1 — direct
- npm>3.4.1>lodash._baseindexof@3.1.0 — direct
- npm>3.4.1>lodash._baseuniq@3.0.3 — direct
- npm>3.4.1>lodash._bindcallback@3.0.1 — direct
- npm>3.4.1>lodash._cacheindexof@3.0.2 — direct
- npm>3.4.1>lodash._createcache@3.1.2 — direct
- npm>3.4.1>lodash._getnative@3.9.1 — direct
- npm>3.4.1>lodash.clonedeep@3.0.2 — direct
- npm>3.4.1>lodash.isarguments@3.0.4 — direct
- npm>3.4.1>lodash.isarray@3.0.4 — direct
- npm>3.4.1>lodash.keys@3.1.2 — direct
- npm>3.4.1>lodash.restparam@3.6.1 — direct
- npm>3.4.1>lodash.union@3.1.0 — direct
- npm>3.4.1>lodash.uniq@3.2.2 — direct
- npm>3.4.1>lodash.without@3.2.1 — direct
- npm>3.4.1>mkdirp@0.5.1 — direct
- npm>3.4.1>node-gyp@3.0.3 — direct
- npm>3.4.1>nopt@3.0.4 — direct
- npm>3.4.1>normalize-git-url@3.0.1 — direct
- npm>3.4.1>normalize-package-data@2.3.5 — direct
- npm>3.4.1>npm-cache-filename@1.0.2 — direct
- npm>3.4.1>npm-install-checks@2.0.1 — direct
- npm>3.4.1>npm-package-arg@4.1.0 — direct
- npm>3.4.1>npm-registry-client@7.0.7 — direct
- npm>3.4.1>npm-user-validate@0.1.2 — direct
- npm>3.4.1>npmlog@2.0.0 — direct
- npm>3.4.1>once@1.3.2 — direct
- npm>3.4.1>opener@1.4.1 — direct
- npm>3.4.1>osenv@0.1.3 — direct
- npm>3.4.1>path-is-inside@1.0.1 — direct
- npm>3.4.1>read@1.0.7 — direct
- npm>3.4.1>read-cmd-shim@1.0.1 — direct
- npm>3.4.1>read-installed@4.0.3 — direct
- npm>3.4.1>read-package-json@2.0.2 — direct
- npm>3.4.1>read-package-tree@5.1.2 — direct
- npm>3.4.1>readdir-scoped-modules@1.0.2 — direct
- npm>3.4.1>realize-package-specifier@3.0.1 — direct
- npm>3.4.1>request@2.65.0 — direct
- npm>3.4.1>retry@0.8.0 — direct
- npm>3.4.1>rimraf@2.4.3 — direct
- npm>3.4.1>semver@5.0.3 — direct
- npm>3.4.1>sha@2.0.1 — direct
- npm>3.4.1>slide@1.1.6 — direct
- npm>3.4.1>sorted-object@1.0.0 — direct
- npm>3.4.1>strip-ansi@3.0.0 — direct
- npm>3.4.1>tar@2.2.1 — direct
- npm>3.4.1>text-table@0.2.0 — direct
- npm>3.4.1>uid-number@0.0.6 — direct
- npm>3.4.1>umask@1.1.0 — direct
- npm>3.4.1>unique-filename@1.0.0 — direct
- npm>3.4.1>unpipe@1.0.0 — direct
- npm>3.4.1>validate-npm-package-license@3.0.1 — direct
- npm>3.4.1>validate-npm-package-name@2.2.2 — direct
- npm>3.4.1>which@1.2.0 — direct
- npm>3.4.1>wrappy@1.0.1 — direct
- npm>3.4.1>write-file-atomic@1.1.3 — direct
- npm>3.4.1>cmd-shim>graceful-fs@3.0.8 — indirect
- npm>3.4.1>columnify>wcwidth@1.0.0 — indirect
- npm>3.4.1>config-chain>proto-list@1.2.4 — indirect
- npm>3.4.1>dezalgo>asap@2.0.3 — indirect
- npm>3.4.1>fstream-npm>fstream-ignore@1.0.3 — indirect
- npm>3.4.1>glob>minimatch@3.0.0 — indirect
- npm>3.4.1>glob>path-is-absolute@1.0.0 — indirect
- npm>3.4.1>init-package-json>promzard@0.3.0 — indirect
- npm>3.4.1>lodash.clonedeep>lodash._baseclone@3.3.0 — indirect
- npm>3.4.1>lodash.union>lodash._baseflatten@3.1.4 — indirect
- npm>3.4.1>lodash.uniq>lodash._basecallback@3.3.1 — indirect
- npm>3.4.1>lodash.uniq>lodash._isiterateecall@3.0.9 — indirect
- npm>3.4.1>lodash.without>lodash._basedifference@3.0.3 — indirect
- npm>3.4.1>mkdirp>minimist@0.0.8 — indirect
- npm>3.4.1>node-gyp>glob@4.5.3 — indirect
- npm>3.4.1>node-gyp>minimatch@1.0.0 — indirect
- npm>3.4.1>node-gyp>npmlog@1.2.1 — indirect
- npm>3.4.1>node-gyp>path-array@1.0.0 — indirect
- npm>3.4.1>node-gyp>tar@1.0.3 — indirect
- npm>3.4.1>normalize-package-data>is-builtin-module@1.0.0 — indirect
- npm>3.4.1>npm-install-checks>npmlog@1.2.1 — indirect
- npm>3.4.1>npm-registry-client>concat-stream@1.5.0 — indirect
- npmlog@7.0.1 — indirect
- npm>3.4.1>npmlog>ansi@0.3.0 — indirect
- npm>3.4.1>npmlog>are-we-there-yet@1.0.4 — indirect
- npm>3.4.1>npmlog>gauge@1.2.2 — indirect
- npm>3.4.1>osenv>os-homedir@1.0.1 — indirect
- npm>3.4.1>osenv>os-tmpdir@1.0.1 — indirect
- npm>3.4.1>read>mute-stream@0.0.5 — indirect
- npm>3.4.1>read-installed>util-extend@1.0.1 — indirect
- npm>3.4.1>read-package-json>json-parse-helpfulerror@1.0.3 — indirect
- npm>3.4.1>request>aws-sign2@0.6.0 — indirect
- npm>3.4.1>request>bl@1.0.0 — indirect
- npm>3.4.1>request>caseless@0.11.0 — indirect
- npm>3.4.1>request>combined-stream@1.0.5 — indirect
- npm>3.4.1>request>extend@3.0.0 — indirect
- npm>3.4.1>request>forever-agent@0.6.1 — indirect
- npm>3.4.1>request>form-data@1.0.0-rc3 — indirect
- npm>3.4.1>request>har-validator@2.0.2 — indirect
- npm>3.4.1>request>hawk@3.1.0 — indirect
- npm>3.4.1>request>http-signature@0.11.0 — indirect
- npm>3.4.1>request>isstream@0.1.2 — indirect
- npm>3.4.1>request>json-stringify-safe@5.0.1 — indirect
- npm>3.4.1>request>mime-types@2.1.7 — indirect
- npm>3.4.1>request>node-uuid@1.4.3 — indirect
- npm>3.4.1>request>oauth-sign@0.8.0 — indirect
- npm>3.4.1>request>qs@5.2.0 — indirect
- npm>3.4.1>request>stringstream@0.0.4 — indirect
- npm>3.4.1>request>tough-cookie@2.2.0 — indirect
- npm>3.4.1>request>tunnel-agent@0.4.1 — indirect
- npm>3.4.1>sha>readable-stream@2.0.2 — indirect
- npm>3.4.1>tar>block-stream@0.0.8 — indirect
- npm>3.4.1>unique-filename>unique-slug@1.0.0 — indirect
- npm>3.4.1>validate-npm-package-license>spdx-correct@1.0.1 — indirect
- npm>3.4.1>validate-npm-package-license>spdx-expression-parse@1.0.0 — indirect
- npm>3.4.1>validate-npm-package-name>builtins@0.0.7 — indirect
- npm>3.4.1>which>is-absolute@0.1.7 — indirect
- npm>3.4.1>columnify>wcwidth>defaults@1.0.3 — indirect
- npm>3.4.1>fstream-npm>fstream-ignore>minimatch@3.0.0 — indirect
- npm>3.4.1>glob>minimatch>brace-expansion@1.1.1 — indirect
- npm>3.4.1>lodash.clonedeep>lodash._baseclone>lodash._arraycopy@3.0.0 — indirect
- npm>3.4.1>lodash.clonedeep>lodash._baseclone>lodash._arrayeach@3.0.0 — indirect
- npm>3.4.1>lodash.clonedeep>lodash._baseclone>lodash._baseassign@3.2.0 — indirect
- npm>3.4.1>lodash.clonedeep>lodash._baseclone>lodash._basefor@3.0.2 — indirect
- npm>3.4.1>lodash.uniq>lodash._basecallback>lodash._baseisequal@3.0.7 — indirect
- npm>3.4.1>lodash.uniq>lodash._basecallback>lodash.pairs@3.0.1 — indirect
- npm>3.4.1>node-gyp>glob>minimatch@2.0.10 — indirect
- npm>3.4.1>node-gyp>minimatch>lru-cache@2.7.0 — indirect
- npm>3.4.1>node-gyp>minimatch>sigmund@1.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>ansi@0.3.0 — indirect
- npm>3.4.1>node-gyp>npmlog>are-we-there-yet@1.0.4 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge@1.2.2 — indirect
- npm>3.4.1>node-gyp>path-array>array-index@0.1.1 — indirect
- npm>3.4.1>node-gyp>tar>block-stream@0.0.8 — indirect
- npm>3.4.1>normalize-package-data>is-builtin-module>builtin-modules@1.1.0 — indirect
- npm>3.4.1>npm-install-checks>npmlog>ansi@0.3.0 — indirect
- npm>3.4.1>npm-install-checks>npmlog>are-we-there-yet@1.0.4 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge@1.2.2 — indirect
- npm>3.4.1>npm-registry-client>concat-stream>readable-stream@2.0.2 — indirect
- npm>3.4.1>npm-registry-client>concat-stream>typedarray@0.0.6 — indirect
- are-we-there-yet@4.0.2 — indirect
- console-control-strings@1.1.0 — indirect
- gauge@5.0.2 — indirect
- set-blocking@2.0.0 — indirect
- npm>3.4.1>npmlog>are-we-there-yet>delegates@0.1.0 — indirect
- npm>3.4.1>npmlog>are-we-there-yet>readable-stream@1.1.13 — indirect
- npm>3.4.1>npmlog>gauge>lodash.pad@3.1.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.padleft@3.1.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.padright@3.1.1 — indirect
- npm>3.4.1>read-package-json>json-parse-helpfulerror>jju@1.2.1 — indirect
- npm>3.4.1>request>bl>readable-stream@2.0.2 — indirect
- npm>3.4.1>request>combined-stream>delayed-stream@1.0.0 — indirect
- npm>3.4.1>request>form-data>async@1.4.2 — indirect
- npm>3.4.1>request>har-validator>chalk@1.1.1 — indirect
- npm>3.4.1>request>har-validator>commander@2.9.0 — indirect
- npm>3.4.1>request>har-validator>is-my-json-valid@2.12.2 — indirect
- npm>3.4.1>request>har-validator>pinkie-promise@1.0.0 — indirect
- npm>3.4.1>request>hawk>boom@2.9.0 — indirect
- npm>3.4.1>request>hawk>cryptiles@2.0.5 — indirect
- npm>3.4.1>request>hawk>hoek@2.16.3 — indirect
- npm>3.4.1>request>hawk>sntp@1.0.9 — indirect
- npm>3.4.1>request>http-signature>asn1@0.1.11 — indirect
- npm>3.4.1>request>http-signature>assert-plus@0.1.5 — indirect
- npm>3.4.1>request>http-signature>ctype@0.5.3 — indirect
- npm>3.4.1>request>mime-types>mime-db@1.19.0 — indirect
- npm>3.4.1>sha>readable-stream>core-util-is@1.0.1 — indirect
- npm>3.4.1>sha>readable-stream>isarray@0.0.1 — indirect
- npm>3.4.1>sha>readable-stream>process-nextick-args@1.0.3 — indirect
- npm>3.4.1>sha>readable-stream>string_decoder@0.10.31 — indirect
- npm>3.4.1>sha>readable-stream>util-deprecate@1.0.2 — indirect
- npm>3.4.1>validate-npm-package-license>spdx-license-ids@1.0.2 — indirect
- npm>3.4.1>validate-npm-package-license>spdx-expression-parse>spdx-exceptions@1.0.3 — indirect
- npm>3.4.1>which>is-absolute>is-relative@0.1.3 — indirect
- npm>3.4.1>columnify>wcwidth>defaults>clone@1.0.2 — indirect
- npm>3.4.1>fstream-npm>fstream-ignore>minimatch>brace-expansion@1.1.1 — indirect
- npm>3.4.1>glob>minimatch>brace-expansion>balanced-match@0.2.0 — indirect
- npm>3.4.1>glob>minimatch>brace-expansion>concat-map@0.0.1 — indirect
- npm>3.4.1>lodash.clonedeep>lodash._baseclone>lodash._baseassign>lodash._basecopy@3.0.1 — indirect
- npm>3.4.1>lodash.uniq>lodash._basecallback>lodash._baseisequal>lodash.istypedarray@3.0.2 — indirect
- npm>3.4.1>node-gyp>glob>minimatch>brace-expansion@1.1.1 — indirect
- npm>3.4.1>node-gyp>npmlog>are-we-there-yet>delegates@0.1.0 — indirect
- npm>3.4.1>node-gyp>npmlog>are-we-there-yet>readable-stream@1.1.13 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.pad@3.1.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.padleft@3.1.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.padright@3.1.1 — indirect
- npm>3.4.1>node-gyp>path-array>array-index>debug@2.2.0 — indirect
- npm>3.4.1>npm-install-checks>npmlog>are-we-there-yet>delegates@0.1.0 — indirect
- npm>3.4.1>npm-install-checks>npmlog>are-we-there-yet>readable-stream@1.1.13 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.pad@3.1.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.padleft@3.1.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.padright@3.1.1 — indirect
- npm>3.4.1>npm-registry-client>concat-stream>readable-stream>core-util-is@1.0.1 — indirect
- npm>3.4.1>npm-registry-client>concat-stream>readable-stream>isarray@0.0.1 — indirect
- npm>3.4.1>npm-registry-client>concat-stream>readable-stream>process-nextick-args@1.0.3 — indirect
- npm>3.4.1>npm-registry-client>concat-stream>readable-stream>string_decoder@0.10.31 — indirect
- npm>3.4.1>npm-registry-client>concat-stream>readable-stream>util-deprecate@1.0.2 — indirect
- aproba@2.1.0 — indirect
- color-support@1.1.3 — indirect
- has-unicode@2.0.1 — indirect
- signal-exit@4.1.0 — indirect
- string-width@4.2.3 — indirect
- strip-ansi@6.0.1 — indirect
- wide-align@1.1.5 — indirect
- npm>3.4.1>npmlog>are-we-there-yet>readable-stream>core-util-is@1.0.1 — indirect
- npm>3.4.1>npmlog>are-we-there-yet>readable-stream>isarray@0.0.1 — indirect
- npm>3.4.1>npmlog>are-we-there-yet>readable-stream>string_decoder@0.10.31 — indirect
- npm>3.4.1>npmlog>gauge>lodash.pad>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.pad>lodash._createpadding@3.6.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.padleft>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.padleft>lodash._createpadding@3.6.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.padright>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.padright>lodash._createpadding@3.6.1 — indirect
- npm>3.4.1>request>bl>readable-stream>core-util-is@1.0.1 — indirect
- npm>3.4.1>request>bl>readable-stream>isarray@0.0.1 — indirect
- npm>3.4.1>request>bl>readable-stream>process-nextick-args@1.0.3 — indirect
- npm>3.4.1>request>bl>readable-stream>string_decoder@0.10.31 — indirect
- npm>3.4.1>request>bl>readable-stream>util-deprecate@1.0.2 — indirect
- npm>3.4.1>request>har-validator>chalk>ansi-styles@2.1.0 — indirect
- npm>3.4.1>request>har-validator>chalk>escape-string-regexp@1.0.3 — indirect
- npm>3.4.1>request>har-validator>chalk>has-ansi@2.0.0 — indirect
- npm>3.4.1>request>har-validator>chalk>supports-color@2.0.0 — indirect
- npm>3.4.1>request>har-validator>commander>graceful-readlink@1.0.1 — indirect
- npm>3.4.1>request>har-validator>is-my-json-valid>generate-function@2.0.0 — indirect
- npm>3.4.1>request>har-validator>is-my-json-valid>generate-object-property@1.2.0 — indirect
- npm>3.4.1>request>har-validator>is-my-json-valid>jsonpointer@2.0.0 — indirect
- npm>3.4.1>request>har-validator>is-my-json-valid>xtend@4.0.0 — indirect
- npm>3.4.1>request>har-validator>pinkie-promise>pinkie@1.0.0 — indirect
- npm>3.4.1>fstream-npm>fstream-ignore>minimatch>brace-expansion>balanced-match@0.2.1 — indirect
- npm>3.4.1>fstream-npm>fstream-ignore>minimatch>brace-expansion>concat-map@0.0.1 — indirect
- npm>3.4.1>node-gyp>glob>minimatch>brace-expansion>balanced-match@0.2.1 — indirect
- npm>3.4.1>node-gyp>glob>minimatch>brace-expansion>concat-map@0.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>are-we-there-yet>readable-stream>core-util-is@1.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>are-we-there-yet>readable-stream>isarray@0.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>are-we-there-yet>readable-stream>string_decoder@0.10.31 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.pad>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.pad>lodash._createpadding@3.6.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.padleft>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.padleft>lodash._createpadding@3.6.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.padright>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.padright>lodash._createpadding@3.6.1 — indirect
- npm>3.4.1>node-gyp>path-array>array-index>debug>ms@0.7.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>are-we-there-yet>readable-stream>core-util-is@1.0.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>are-we-there-yet>readable-stream>isarray@0.0.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>are-we-there-yet>readable-stream>string_decoder@0.10.31 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.pad>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.pad>lodash._createpadding@3.6.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.padleft>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.padleft>lodash._createpadding@3.6.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.padright>lodash._basetostring@3.0.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.padright>lodash._createpadding@3.6.1 — indirect
- emoji-regex@8.0.0 — indirect
- is-fullwidth-code-point@3.0.0 — indirect
- strip-ansi@6.0.1 — indirect
- ansi-regex@5.0.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.pad>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.padleft>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- npm>3.4.1>npmlog>gauge>lodash.padright>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- npm>3.4.1>request>har-validator>is-my-json-valid>generate-object-property>is-property@1.0.2 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.pad>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.padleft>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- npm>3.4.1>node-gyp>npmlog>gauge>lodash.padright>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.pad>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.padleft>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- npm>3.4.1>npm-install-checks>npmlog>gauge>lodash.padright>lodash._createpadding>lodash.repeat@3.0.1 — indirect
- ansi-regex@5.0.1 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Known direct advisories
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 10/10 — all changesets reviewed |
|---|---|
| Security-Policy | 10/10 — security policy file detected |
| Maintained | 10/10 — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| License | 9/10 — license file detected |
| Token-Permissions | 0/10 — detected GitHub workflow tokens with excessive permissions |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Pinned-Dependencies | 0/10 — dependency not pinned by hash detected -- score normalized to 0 |
| SAST | 9/10 — SAST tool detected but not run on all commits |
| Fuzzing | 0/10 — project is not fuzzed |
Evidence and freshness
- https://registry.npmjs.org/npm/3.4.1 — retrieved 2026-10-31T21:54:52.344Z
- https://api.deps.dev/v3/projects/github.com%2Fnpm%2Fcli — retrieved 2026-10-31T17:06:23.541Z
- https://api.deps.dev/v3/systems/npm/packages/npm/versions/3.4.1 — retrieved 2026-10-31T21:54:52.871Z
- https://api.deps.dev/v3/systems/npm/packages/npm/versions/3.4.1:dependencies — retrieved 2026-10-31T21:54:52.899Z