nyc 14.0.0

the Istanbul command line interface

nyc@14.0.0 was published on 2019-04-16. Its manifest declares 24 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=6.

All nyc versions · Permanent reference to 14.0.0 · View npm registry JSON · Latest release

Package specifications

Version	14.0.0
License declaration	ISC
Published	2019-04-16T10:07:14.990Z
Node.js requirement	>=6
Type declarations	Not declared
Runtime dependency count	24
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	107.46 KiB
Published file count	18
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	131
Repository stars	5763
Repository forks	362

Install nyc 14.0.0

npm install nyc@14.0.0
pnpm add nyc@14.0.0
yarn add nyc@14.0.0

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

archy@1.0.0 — direct
caching-transform@3.0.2 — direct
convert-source-map@1.9.0 — direct
cp-file@6.2.0 — direct
find-cache-dir@2.1.0 — direct
find-up@3.0.0 — direct
foreground-child@1.5.6 — direct
glob@7.2.3 — direct
istanbul-lib-coverage@2.0.5 — direct
istanbul-lib-hook@2.0.7 — direct
istanbul-lib-instrument@3.3.0 — direct
istanbul-lib-report@2.0.8 — direct
istanbul-lib-source-maps@3.0.6 — direct
istanbul-reports@2.2.7 — direct
make-dir@2.1.0 — direct
merge-source-map@1.1.0 — direct
resolve-from@4.0.0 — direct
rimraf@2.7.1 — direct
signal-exit@3.0.7 — direct
spawn-wrap@1.4.3 — direct
test-exclude@5.2.3 — direct
uuid@3.4.0 — direct
yargs@13.3.2 — direct
yargs-parser@13.1.2 — direct
hasha@3.0.0 — indirect
package-hash@3.0.0 — indirect
write-file-atomic@2.4.3 — indirect
graceful-fs@4.2.11 — indirect
nested-error-stacks@2.1.1 — indirect
pify@4.0.1 — indirect
safe-buffer@5.2.1 — indirect
commondir@1.0.1 — indirect
pkg-dir@3.0.0 — indirect
locate-path@3.0.0 — indirect
cross-spawn@4.0.2 — indirect
fs.realpath@1.0.0 — indirect
inflight@1.0.6 — indirect
inherits@2.0.4 — indirect
minimatch@3.1.5 — indirect
once@1.4.0 — indirect
path-is-absolute@1.0.1 — indirect
append-transform@1.0.0 — indirect
@babel/generator@7.29.12 — indirect
@babel/parser@7.29.12 — indirect
@babel/template@7.29.7 — indirect
@babel/traverse@7.29.12 — indirect
@babel/types@7.29.11 — indirect
semver@6.3.2 — indirect
supports-color@6.1.0 — indirect
debug@4.4.3 — indirect
source-map@0.6.1 — indirect
html-escaper@2.0.2 — indirect
semver@5.7.3 — indirect
mkdirp@0.5.6 — indirect
os-homedir@1.0.2 — indirect
which@1.3.1 — indirect
read-pkg-up@4.0.0 — indirect
require-main-filename@2.0.0 — indirect
cliui@5.0.0 — indirect
get-caller-file@2.0.5 — indirect
require-directory@2.1.1 — indirect
set-blocking@2.0.0 — indirect
string-width@3.1.0 — indirect
which-module@2.0.1 — indirect
y18n@4.0.3 — indirect
camelcase@5.3.1 — indirect
decamelize@1.2.0 — indirect
is-stream@1.1.0 — indirect
lodash.flattendeep@4.4.0 — indirect
release-zalgo@1.0.0 — indirect
imurmurhash@0.1.4 — indirect
p-locate@3.0.0 — indirect
path-exists@3.0.0 — indirect
lru-cache@4.1.5 — indirect
wrappy@1.0.2 — indirect
brace-expansion@1.1.21 — indirect
default-require-extensions@2.0.0 — indirect
@jridgewell/gen-mapping@0.3.13 — indirect
@jridgewell/trace-mapping@0.3.31 — indirect
jsesc@3.1.0 — indirect
@babel/code-frame@7.29.7 — indirect
@babel/helper-globals@7.29.7 — indirect
@babel/helper-string-parser@7.29.11 — indirect
@babel/helper-validator-identifier@7.29.7 — indirect
has-flag@3.0.0 — indirect
ms@2.1.3 — indirect
minimist@1.2.8 — indirect
isexe@2.0.0 — indirect
read-pkg@3.0.0 — indirect
strip-ansi@5.2.0 — indirect
wrap-ansi@5.1.0 — indirect
emoji-regex@7.0.3 — indirect
is-fullwidth-code-point@2.0.0 — indirect
es6-error@4.1.1 — indirect
p-limit@2.3.0 — indirect
pseudomap@1.0.2 — indirect
yallist@2.1.2 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
strip-bom@3.0.0 — indirect
@jridgewell/sourcemap-codec@1.6.0 — indirect
@jridgewell/resolve-uri@3.1.2 — indirect
js-tokens@4.0.0 — indirect
picocolors@1.1.1 — indirect
load-json-file@4.0.0 — indirect
normalize-package-data@2.5.0 — indirect
path-type@3.0.0 — indirect
ansi-regex@4.1.1 — indirect
ansi-styles@3.2.1 — indirect
p-try@2.2.0 — indirect
parse-json@4.0.0 — indirect
pify@3.0.0 — indirect
hosted-git-info@2.8.9 — indirect
resolve@1.22.13 — indirect
validate-npm-package-license@3.0.4 — indirect
pify@3.0.0 — indirect
color-convert@1.9.3 — indirect
error-ex@1.3.4 — indirect
json-parse-better-errors@1.0.2 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
color-name@1.1.3 — indirect
is-arrayish@0.2.1 — indirect
hasown@2.0.4 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
function-bind@1.1.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Code-Review	3/10 — Found 9/23 approved changesets -- score normalized to 3
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	3/10 — dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-04T12:18:11.494Z
https://api.deps.dev/v3/systems/npm/packages/nyc/versions/14.0.0 — retrieved 2026-11-04T12:18:11.587Z
https://api.deps.dev/v3/systems/npm/packages/nyc/versions/14.0.0:dependencies — retrieved 2026-11-04T12:18:11.612Z
https://api.deps.dev/v3/projects/github.com%2Fistanbuljs%2Fnyc — retrieved 2026-11-04T09:55:11.307Z