nyc 5.1.1

a code coverage tool that works well with subprocesses.

nyc@5.1.1 was published on 2015-12-30. Its manifest declares 17 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

All nyc versions · Permanent reference to 5.1.1 · View npm registry JSON · Latest release

Package specifications

Version	5.1.1
License declaration	ISC
Published	2015-12-30T22:59:58.058Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	17
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	128
Repository stars	5763
Repository forks	362

Install nyc 5.1.1

npm install nyc@5.1.1
pnpm add nyc@5.1.1
yarn add nyc@5.1.1

Runtime dependencies

glob ^6.0.2
yargs ^3.15.0
arrify ^1.0.1
mkdirp ^0.5.0
rimraf ^2.5.0
md5-hex ^1.2.0
istanbul ^0.4.1
strip-bom ^2.0.0
micromatch ~2.1.6
source-map ^0.5.3
spawn-wrap ^1.1.0
signal-exit ^2.1.1
resolve-from ^2.0.0
append-transform ^0.2.0
foreground-child ^1.3.0
caching-transform ^1.0.0
convert-source-map ^1.1.2

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

append-transform@0.2.2 — direct
arrify@1.0.1 — direct
caching-transform@1.0.1 — direct
convert-source-map@1.9.0 — direct
foreground-child@1.5.6 — direct
glob@6.0.4 — direct
istanbul@0.4.5 — direct
md5-hex@1.3.0 — direct
micromatch@2.1.6 — direct
mkdirp@0.5.6 — direct
resolve-from@2.0.0 — direct
rimraf@2.7.1 — direct
signal-exit@2.1.2 — direct
source-map@0.5.7 — direct
spawn-wrap@1.4.3 — direct
strip-bom@2.0.0 — direct
yargs@3.32.0 — direct
write-file-atomic@1.3.4 — indirect
cross-spawn@4.0.2 — indirect
signal-exit@3.0.7 — indirect
inflight@1.0.6 — indirect
inherits@2.0.4 — indirect
minimatch@3.1.5 — indirect
once@1.4.0 — indirect
path-is-absolute@1.0.1 — indirect
abbrev@1.0.9 — indirect
async@1.5.2 — indirect
escodegen@1.8.1 — indirect
esprima@2.7.3 — indirect
glob@5.0.15 — indirect
handlebars@4.7.10 — indirect
js-yaml@3.15.2 — indirect
nopt@3.0.6 — indirect
resolve@1.1.7 — indirect
supports-color@3.2.3 — indirect
which@1.3.1 — indirect
wordwrap@1.0.0 — indirect
md5-o-matic@0.1.1 — indirect
arr-diff@1.1.0 — indirect
braces@1.8.5 — indirect
debug@2.6.9 — indirect
expand-brackets@0.1.5 — indirect
filename-regex@2.0.1 — indirect
is-glob@1.1.3 — indirect
kind-of@1.1.0 — indirect
object.omit@0.2.1 — indirect
parse-glob@3.0.4 — indirect
regex-cache@0.4.4 — indirect
minimist@1.2.8 — indirect
glob@7.2.3 — indirect
os-homedir@1.0.2 — indirect
signal-exit@3.0.7 — indirect
is-utf8@0.2.1 — indirect
camelcase@2.1.1 — indirect
cliui@3.2.0 — indirect
decamelize@1.2.0 — indirect
os-locale@1.4.0 — indirect
string-width@1.0.2 — indirect
window-size@0.1.4 — indirect
y18n@3.2.2 — indirect
graceful-fs@4.2.11 — indirect
imurmurhash@0.1.4 — indirect
slide@1.1.6 — indirect
lru-cache@4.1.5 — indirect
wrappy@1.0.2 — indirect
brace-expansion@1.1.21 — indirect
estraverse@1.9.3 — indirect
esutils@2.0.3 — indirect
optionator@0.8.3 — indirect
source-map@0.2.0 — indirect
neo-async@2.6.2 — indirect
source-map@0.6.1 — indirect
uglify-js@3.19.3 — indirect
argparse@1.0.10 — indirect
esprima@4.0.1 — indirect
has-flag@1.0.0 — indirect
isexe@2.0.0 — indirect
arr-flatten@1.1.0 — indirect
array-slice@0.2.3 — indirect
expand-range@1.8.2 — indirect
preserve@0.2.0 — indirect
repeat-element@1.1.4 — indirect
ms@2.0.0 — indirect
is-posix-bracket@0.1.1 — indirect
for-own@0.1.5 — indirect
isobject@0.2.0 — indirect
glob-base@0.3.0 — indirect
is-dotfile@1.0.3 — indirect
is-extglob@1.0.0 — indirect
is-glob@2.0.1 — indirect
is-equal-shallow@0.1.3 — indirect
fs.realpath@1.0.0 — indirect
strip-ansi@3.0.1 — indirect
wrap-ansi@2.1.0 — indirect
lcid@1.0.0 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
pseudomap@1.0.2 — indirect
yallist@2.1.2 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
deep-is@0.1.4 — indirect
fast-levenshtein@2.0.6 — indirect
levn@0.3.0 — indirect
prelude-ls@1.1.2 — indirect
type-check@0.3.2 — indirect
word-wrap@1.2.5 — indirect
amdefine@1.0.1 — indirect
sprintf-js@1.0.3 — indirect
fill-range@2.2.4 — indirect
for-in@1.0.2 — indirect
glob-parent@2.0.0 — indirect
is-glob@2.0.1 — indirect
is-primitive@2.0.0 — indirect
ansi-regex@2.1.1 — indirect
invert-kv@1.0.0 — indirect
number-is-nan@1.0.1 — indirect
is-number@2.1.0 — indirect
isobject@2.1.0 — indirect
randomatic@3.1.1 — indirect
repeat-string@1.6.1 — indirect
is-glob@2.0.1 — indirect
kind-of@3.2.2 — indirect
isarray@1.0.0 — indirect
is-number@4.0.0 — indirect
kind-of@6.0.3 — indirect
math-random@1.0.4 — indirect
is-buffer@1.1.6 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Code-Review	3/10 — Found 9/23 approved changesets -- score normalized to 3
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	3/10 — dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-02T23:52:11.896Z
https://api.deps.dev/v3/systems/npm/packages/nyc/versions/5.1.1 — retrieved 2026-11-02T23:52:11.984Z
https://api.deps.dev/v3/systems/npm/packages/nyc/versions/5.1.1:dependencies — retrieved 2026-11-02T23:52:12.002Z
https://api.deps.dev/v3/projects/github.com%2Fistanbuljs%2Fnyc — retrieved 2026-11-02T17:42:22.209Z (stale snapshot; refresh pending)