nyc 13.3.0

the Istanbul command line interface

nyc@13.3.0 was published on 2019-02-14. Its manifest declares 24 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=6.

All nyc versions · Permanent reference to 13.3.0 · View npm registry JSON · Latest release

Package specifications

Version	13.3.0
License declaration	ISC
Published	2019-02-14T15:03:21.390Z
Node.js requirement	>=6
Type declarations	Not declared
Runtime dependency count	24
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	10271.74 KiB
Published file count	2282
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	158
Repository stars	5763
Repository forks	362

Install nyc 13.3.0

npm install nyc@13.3.0
pnpm add nyc@13.3.0
yarn add nyc@13.3.0

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@babel/code-frame@7.29.7 — indirect
@babel/generator@7.29.12 — indirect
@babel/helper-globals@7.29.7 — indirect
@babel/helper-string-parser@7.29.11 — indirect
@babel/helper-validator-identifier@7.29.7 — indirect
@babel/parser@7.29.12 — indirect
@babel/template@7.29.7 — indirect
@babel/traverse@7.29.12 — indirect
@babel/types@7.29.11 — indirect
@jridgewell/gen-mapping@0.3.13 — indirect
@jridgewell/resolve-uri@3.1.2 — indirect
@jridgewell/sourcemap-codec@1.6.0 — indirect
@jridgewell/trace-mapping@0.3.31 — indirect
debug@4.4.3 — indirect
istanbul-lib-coverage@2.0.5 — indirect
istanbul-lib-instrument@3.3.0 — direct
js-tokens@4.0.0 — indirect
jsesc@3.1.0 — indirect
ms@2.1.3 — indirect
ansi-regex@3.0.0 bundled — indirect
append-transform@1.0.0 bundled — indirect
archy@1.0.0 bundled — direct
arrify@1.0.1 bundled — direct
async@2.6.2 bundled — indirect
balanced-match@1.0.0 bundled — indirect
brace-expansion@1.1.11 bundled — indirect
caching-transform@3.0.1 bundled — direct
camelcase@5.0.0 bundled — indirect
cliui@4.1.0 bundled — indirect
code-point-at@1.1.0 bundled — indirect
commander@2.17.1 bundled — indirect
commondir@1.0.1 bundled — indirect
concat-map@0.0.1 bundled — indirect
convert-source-map@1.6.0 bundled — direct
cross-spawn@4.0.2 bundled — indirect
debug@4.1.1 bundled — indirect
decamelize@1.2.0 bundled — indirect
default-require-extensions@2.0.0 bundled — indirect
end-of-stream@1.4.1 bundled — indirect
error-ex@1.3.2 bundled — indirect
es6-error@4.1.1 bundled — indirect
execa@1.0.0 bundled — indirect
cross-spawn@6.0.5 bundled — indirect
find-cache-dir@2.0.0 bundled — direct
find-up@3.0.0 bundled — direct
foreground-child@1.5.6 bundled — direct
fs.realpath@1.0.0 bundled — indirect
get-caller-file@1.0.3 bundled — indirect
get-stream@4.1.0 bundled — indirect
glob@7.1.3 bundled — direct
graceful-fs@4.1.15 bundled — indirect
handlebars@4.1.0 bundled — indirect
source-map@0.6.1 bundled — indirect
has-flag@3.0.0 bundled — indirect
hasha@3.0.0 bundled — indirect
hosted-git-info@2.7.1 bundled — indirect
imurmurhash@0.1.4 bundled — indirect
inflight@1.0.6 bundled — indirect
inherits@2.0.3 bundled — indirect
invert-kv@2.0.0 bundled — indirect
is-arrayish@0.2.1 bundled — indirect
is-fullwidth-code-point@2.0.0 bundled — indirect
is-stream@1.1.0 bundled — indirect
isexe@2.0.0 bundled — indirect
istanbul-lib-coverage@2.0.3 bundled — direct
istanbul-lib-hook@2.0.3 bundled — direct
istanbul-lib-report@2.0.4 bundled — direct
supports-color@6.1.0 bundled — indirect
istanbul-lib-source-maps@3.0.2 bundled — direct
source-map@0.6.1 bundled — indirect
istanbul-reports@2.1.1 bundled — direct
json-parse-better-errors@1.0.2 bundled — indirect
lcid@2.0.0 bundled — indirect
load-json-file@4.0.0 bundled — indirect
locate-path@3.0.0 bundled — indirect
lodash@4.17.11 bundled — indirect
lodash.flattendeep@4.4.0 bundled — indirect
lru-cache@4.1.5 bundled — indirect
make-dir@1.3.0 bundled — direct
map-age-cleaner@0.1.3 bundled — indirect
mem@4.1.0 bundled — indirect
merge-source-map@1.1.0 bundled — direct
source-map@0.6.1 bundled — indirect
mimic-fn@1.2.0 bundled — indirect
minimatch@3.0.4 bundled — indirect
minimist@0.0.10 bundled — indirect
mkdirp@0.5.1 bundled — indirect
minimist@0.0.8 bundled — indirect
ms@2.1.1 bundled — indirect
nice-try@1.0.5 bundled — indirect
normalize-package-data@2.5.0 bundled — indirect
npm-run-path@2.0.2 bundled — indirect
number-is-nan@1.0.1 bundled — indirect
once@1.4.0 bundled — indirect
optimist@0.6.1 bundled — indirect
os-homedir@1.0.2 bundled — indirect
os-locale@3.1.0 bundled — indirect
p-defer@1.0.0 bundled — indirect
p-finally@1.0.0 bundled — indirect
p-is-promise@2.0.0 bundled — indirect
p-limit@2.1.0 bundled — indirect
p-locate@3.0.0 bundled — indirect
p-try@2.0.0 bundled — indirect
package-hash@3.0.0 bundled — indirect
parse-json@4.0.0 bundled — indirect
path-exists@3.0.0 bundled — indirect
path-is-absolute@1.0.1 bundled — indirect
path-key@2.0.1 bundled — indirect
path-parse@1.0.6 bundled — indirect
path-type@3.0.0 bundled — indirect
pify@3.0.0 bundled — indirect
pkg-dir@3.0.0 bundled — indirect
pseudomap@1.0.2 bundled — indirect
pump@3.0.0 bundled — indirect
read-pkg@3.0.0 bundled — indirect
read-pkg-up@4.0.0 bundled — indirect
release-zalgo@1.0.0 bundled — indirect
require-directory@2.1.1 bundled — indirect
require-main-filename@1.0.1 bundled — indirect
resolve@1.10.0 bundled — indirect
resolve-from@4.0.0 bundled — direct
rimraf@2.6.3 bundled — direct
safe-buffer@5.1.2 bundled — indirect
semver@5.6.0 bundled — indirect
set-blocking@2.0.0 bundled — indirect
shebang-command@1.2.0 bundled — indirect
shebang-regex@1.0.0 bundled — indirect
signal-exit@3.0.2 bundled — direct
spawn-wrap@1.4.2 bundled — direct
spdx-correct@3.1.0 bundled — indirect
spdx-exceptions@2.2.0 bundled — indirect
spdx-expression-parse@3.0.0 bundled — indirect
spdx-license-ids@3.0.3 bundled — indirect
string-width@2.1.1 bundled — indirect
strip-ansi@4.0.0 bundled — indirect
strip-bom@3.0.0 bundled — indirect
strip-eof@1.0.0 bundled — indirect
test-exclude@5.1.0 bundled — direct
uglify-js@3.4.9 bundled — indirect
source-map@0.6.1 bundled — indirect
uuid@3.3.2 bundled — direct
validate-npm-package-license@3.0.4 bundled — indirect
which@1.3.1 bundled — indirect
which-module@2.0.0 bundled — indirect
wordwrap@0.0.3 bundled — indirect
wrap-ansi@2.1.0 bundled — indirect
ansi-regex@2.1.1 bundled — indirect
is-fullwidth-code-point@1.0.0 bundled — indirect
string-width@1.0.2 bundled — indirect
strip-ansi@3.0.1 bundled — indirect
wrappy@1.0.2 bundled — indirect
write-file-atomic@2.4.2 bundled — indirect
y18n@4.0.0 bundled — indirect
yallist@2.1.2 bundled — indirect
yargs@12.0.5 bundled — direct
yargs-parser@11.1.1 bundled — direct
picocolors@1.1.1 — indirect
semver@6.3.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Code-Review	3/10 — Found 9/23 approved changesets -- score normalized to 3
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	3/10 — dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-03T12:42:12.443Z
https://api.deps.dev/v3/projects/github.com%2Fistanbuljs%2Fnyc — retrieved 2026-11-03T12:41:18.388Z
https://api.deps.dev/v3/systems/npm/packages/nyc/versions/13.3.0 — retrieved 2026-11-03T12:42:12.521Z
https://api.deps.dev/v3/systems/npm/packages/nyc/versions/13.3.0:dependencies — retrieved 2026-11-03T12:42:12.556Z