nyc 10.3.1

the Istanbul command line interface

nyc@10.3.1 was published on 2017-05-04. Its manifest declares 27 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

All nyc versions · Permanent reference to 10.3.1 · View npm registry JSON · Latest release

Package specifications

Version	10.3.1
License declaration	ISC
Published	2017-05-04T23:41:38.626Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	27
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	182
Repository stars	5763
Repository forks	362

Install nyc 10.3.1

npm install nyc@10.3.1
pnpm add nyc@10.3.1
yarn add nyc@10.3.1

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

align-text@0.1.4 bundled — indirect
amdefine@1.0.1 bundled — indirect
ansi-regex@2.1.1 bundled — indirect
ansi-styles@2.2.1 bundled — indirect
append-transform@0.4.0 bundled — indirect
archy@1.0.0 bundled — direct
arr-diff@2.0.0 bundled — indirect
arr-flatten@1.0.3 bundled — indirect
array-unique@0.2.1 bundled — indirect
arrify@1.0.1 bundled — direct
async@1.5.2 bundled — indirect
babel-code-frame@6.22.0 bundled — indirect
babel-generator@6.24.1 bundled — indirect
babel-messages@6.23.0 bundled — indirect
babel-runtime@6.23.0 bundled — indirect
babel-template@6.24.1 bundled — indirect
babel-traverse@6.24.1 bundled — indirect
babel-types@6.24.1 bundled — indirect
babylon@6.17.0 bundled — indirect
balanced-match@0.4.2 bundled — indirect
brace-expansion@1.1.7 bundled — indirect
braces@1.8.5 bundled — indirect
builtin-modules@1.1.1 bundled — indirect
caching-transform@1.0.1 bundled — direct
camelcase@1.2.1 bundled — indirect
center-align@0.1.3 bundled — indirect
chalk@1.1.3 bundled — indirect
cliui@2.1.0 bundled — indirect
wordwrap@0.0.2 bundled — indirect
code-point-at@1.1.0 bundled — indirect
commondir@1.0.1 bundled — indirect
concat-map@0.0.1 bundled — indirect
convert-source-map@1.5.0 bundled — direct
core-js@2.4.1 bundled — indirect
cross-spawn@4.0.2 bundled — indirect
debug@2.6.6 bundled — indirect
debug-log@1.0.1 bundled — direct
decamelize@1.2.0 bundled — indirect
default-require-extensions@1.0.0 bundled — direct
detect-indent@4.0.0 bundled — indirect
error-ex@1.3.1 bundled — indirect
escape-string-regexp@1.0.5 bundled — indirect
esutils@2.0.2 bundled — indirect
expand-brackets@0.1.5 bundled — indirect
expand-range@1.8.2 bundled — indirect
extglob@0.3.2 bundled — indirect
filename-regex@2.0.1 bundled — indirect
fill-range@2.2.3 bundled — indirect
find-cache-dir@0.1.1 bundled — direct
find-up@1.1.2 bundled — direct
for-in@1.0.2 bundled — indirect
for-own@0.1.5 bundled — indirect
foreground-child@1.5.6 bundled — direct
fs.realpath@1.0.0 bundled — indirect
get-caller-file@1.0.2 bundled — indirect
glob@7.1.1 bundled — direct
glob-base@0.3.0 bundled — indirect
glob-parent@2.0.0 bundled — indirect
globals@9.17.0 bundled — indirect
graceful-fs@4.1.11 bundled — indirect
handlebars@4.0.8 bundled — indirect
source-map@0.4.4 bundled — indirect
has-ansi@2.0.0 bundled — indirect
has-flag@1.0.0 bundled — indirect
hosted-git-info@2.4.2 bundled — indirect
imurmurhash@0.1.4 bundled — indirect
inflight@1.0.6 bundled — indirect
inherits@2.0.3 bundled — indirect
invariant@2.2.2 bundled — indirect
invert-kv@1.0.0 bundled — indirect
is-arrayish@0.2.1 bundled — indirect
is-buffer@1.1.5 bundled — indirect
is-builtin-module@1.0.0 bundled — indirect
is-dotfile@1.0.2 bundled — indirect
is-equal-shallow@0.1.3 bundled — indirect
is-extendable@0.1.1 bundled — indirect
is-extglob@1.0.0 bundled — indirect
is-finite@1.0.2 bundled — indirect
is-fullwidth-code-point@1.0.0 bundled — indirect
is-glob@2.0.1 bundled — indirect
is-number@2.1.0 bundled — indirect
is-posix-bracket@0.1.1 bundled — indirect
is-primitive@2.0.0 bundled — indirect
is-utf8@0.2.1 bundled — indirect
isarray@1.0.0 bundled — indirect
isexe@2.0.0 bundled — indirect
isobject@2.1.0 bundled — indirect
istanbul-lib-coverage@1.1.0 bundled — direct
istanbul-lib-hook@1.0.6 bundled — direct
istanbul-lib-instrument@1.7.1 bundled — direct
istanbul-lib-report@1.1.0 bundled — direct
supports-color@3.2.3 bundled — indirect
istanbul-lib-source-maps@1.2.0 bundled — direct
istanbul-reports@1.1.0 bundled — direct
js-tokens@3.0.1 bundled — indirect
jsesc@1.3.0 bundled — indirect
kind-of@3.2.0 bundled — indirect
lazy-cache@1.0.4 bundled — indirect
lcid@1.0.0 bundled — indirect
load-json-file@1.1.0 bundled — indirect
lodash@4.17.4 bundled — indirect
longest@1.0.1 bundled — indirect
loose-envify@1.3.1 bundled — indirect
lru-cache@4.0.2 bundled — indirect
md5-hex@1.3.0 bundled — direct
md5-o-matic@0.1.1 bundled — indirect
merge-source-map@1.0.3 bundled — direct
micromatch@2.3.11 bundled — direct
minimatch@3.0.3 bundled — indirect
minimist@0.0.8 bundled — indirect
mkdirp@0.5.1 bundled — direct
ms@0.7.3 bundled — indirect
normalize-package-data@2.3.8 bundled — indirect
normalize-path@2.1.1 bundled — indirect
number-is-nan@1.0.1 bundled — indirect
object-assign@4.1.1 bundled — indirect
object.omit@2.0.1 bundled — indirect
once@1.4.0 bundled — indirect
optimist@0.6.1 bundled — indirect
os-homedir@1.0.2 bundled — indirect
os-locale@1.4.0 bundled — indirect
parse-glob@3.0.4 bundled — indirect
parse-json@2.2.0 bundled — indirect
path-exists@2.1.0 bundled — indirect
path-is-absolute@1.0.1 bundled — indirect
path-parse@1.0.5 bundled — indirect
path-type@1.1.0 bundled — indirect
pify@2.3.0 bundled — indirect
pinkie@2.0.4 bundled — indirect
pinkie-promise@2.0.1 bundled — indirect
pkg-dir@1.0.0 bundled — indirect
preserve@0.2.0 bundled — indirect
pseudomap@1.0.2 bundled — indirect
randomatic@1.1.6 bundled — indirect
read-pkg@1.1.0 bundled — indirect
read-pkg-up@1.0.1 bundled — indirect
regenerator-runtime@0.10.5 bundled — indirect
regex-cache@0.4.3 bundled — indirect
remove-trailing-separator@1.0.1 bundled — indirect
repeat-element@1.1.2 bundled — indirect
repeat-string@1.6.1 bundled — indirect
repeating@2.0.1 bundled — indirect
require-directory@2.1.1 bundled — indirect
require-main-filename@1.0.1 bundled — indirect
resolve-from@2.0.0 bundled — direct
right-align@0.1.3 bundled — indirect
rimraf@2.6.1 bundled — direct
semver@5.3.0 bundled — indirect
set-blocking@2.0.0 bundled — indirect
signal-exit@3.0.2 bundled — direct
slide@1.1.6 bundled — indirect
source-map@0.5.6 bundled — indirect
spawn-wrap@1.2.4 bundled — direct
signal-exit@2.1.2 bundled — indirect
spdx-correct@1.0.2 bundled — indirect
spdx-expression-parse@1.0.4 bundled — indirect
spdx-license-ids@1.2.2 bundled — indirect
string-width@1.0.2 bundled — indirect
strip-ansi@3.0.1 bundled — indirect
strip-bom@2.0.0 bundled — indirect
supports-color@2.0.0 bundled — indirect
test-exclude@4.1.0 bundled — direct
to-fast-properties@1.0.3 bundled — indirect
trim-right@1.0.1 bundled — indirect
uglify-js@2.8.22 bundled — indirect
yargs@3.10.0 bundled — indirect
uglify-to-browserify@1.0.2 bundled — indirect
validate-npm-package-license@3.0.1 bundled — indirect
which@1.2.14 bundled — indirect
which-module@1.0.0 bundled — indirect
window-size@0.1.0 bundled — indirect
wordwrap@0.0.3 bundled — indirect
wrap-ansi@2.1.0 bundled — indirect
wrappy@1.0.2 bundled — indirect
write-file-atomic@1.3.4 bundled — indirect
y18n@3.2.1 bundled — indirect
yallist@2.1.2 bundled — indirect
yargs@7.1.0 bundled — direct
yargs-parser@5.0.0 bundled — direct
camelcase@3.0.0 bundled — indirect
camelcase@3.0.0 bundled — indirect
cliui@3.2.0 bundled — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Code-Review	3/10 — Found 9/23 approved changesets -- score normalized to 3
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	3/10 — dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-02T01:04:49.855Z
https://api.deps.dev/v3/projects/github.com%2Fistanbuljs%2Fnyc — retrieved 2026-11-01T23:07:39.757Z
https://api.deps.dev/v3/systems/npm/packages/nyc/versions/10.3.1 — retrieved 2026-11-02T01:04:50.246Z
https://api.deps.dev/v3/systems/npm/packages/nyc/versions/10.3.1:dependencies — retrieved 2026-11-02T01:04:50.280Z