release-it 19.0.4

Generic CLI tool to automate versioning and package publishing-related tasks.

release-it@19.0.4 was published on 2025-07-16. Its manifest declares 23 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is ^20.12.0 || >=22.0.0.

All release-it versions · Permanent reference to 19.0.4 · Latest release

Package specifications

Version	19.0.4
License declaration	MIT
Published	2025-07-16T15:11:19.303Z
Node.js requirement	^20.12.0 \|\| >=22.0.0
Type declarations	Bundled declarations
Runtime dependency count	23
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	310.03 KiB
Published file count	86
Package type	module
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	184
Repository stars	9080
Repository forks	575

Install release-it 19.0.4

npm install release-it@19.0.4
pnpm add release-it@19.0.4
yarn add release-it@19.0.4

Runtime dependencies

c12 3.1.0
eta 3.5.0
ora 8.2.0
open 10.2.0
semver 7.7.2
undici 6.21.3
ci-info ^4.3.0
os-name 6.1.0
inquirer 12.7.0
url-join 5.0.0
mime-types 3.0.1
tinyglobby 0.2.14
async-retry 1.3.3
proxy-agent 6.5.0
issue-parser 7.0.1
lodash.merge 4.6.2
yargs-parser 21.1.1
@octokit/rest 21.1.1
git-url-parse 16.1.0
wildcard-match 5.1.4
@phun-ky/typeof 1.2.8
new-github-release-url 2.0.0
@nodeutils/defaults-deep 1.1.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@nodeutils/defaults-deep@1.1.0 — direct
@octokit/rest@21.1.1 — direct
@phun-ky/typeof@1.2.8 — direct
async-retry@1.3.3 — direct
c12@3.1.0 — direct
ci-info@4.4.0 — direct
eta@3.5.0 — direct
git-url-parse@16.1.0 — direct
inquirer@12.7.0 — direct
issue-parser@7.0.1 — direct
lodash.merge@4.6.2 — direct
mime-types@3.0.1 — direct
new-github-release-url@2.0.0 — direct
open@10.2.0 — direct
ora@8.2.0 — direct
os-name@6.1.0 — direct
proxy-agent@6.5.0 — direct
semver@7.7.2 — direct
tinyglobby@0.2.14 — direct
undici@6.21.3 — direct
url-join@5.0.0 — direct
wildcard-match@5.1.4 — direct
yargs-parser@21.1.1 — direct
lodash@4.18.1 — indirect
@octokit/core@6.1.6 — indirect
@octokit/plugin-paginate-rest@11.6.0 — indirect
@octokit/plugin-request-log@5.3.1 — indirect
@octokit/plugin-rest-endpoint-methods@13.5.0 — indirect
retry@0.13.1 — indirect
chokidar@4.0.3 — indirect
confbox@0.2.4 — indirect
defu@6.1.7 — indirect
dotenv@16.6.1 — indirect
exsolve@1.2.0 — indirect
giget@2.0.0 — indirect
jiti@2.7.0 — indirect
ohash@2.0.12 — indirect
pathe@2.0.3 — indirect
perfect-debounce@1.0.0 — indirect
pkg-types@2.4.0 — indirect
rc9@2.1.2 — indirect
git-up@8.1.1 — indirect
@inquirer/core@10.3.2 — indirect
@inquirer/prompts@7.10.1 — indirect
@inquirer/type@3.0.10 — indirect
ansi-escapes@4.3.2 — indirect
mute-stream@2.0.0 — indirect
run-async@4.0.6 — indirect
rxjs@7.8.2 — indirect
lodash.capitalize@4.2.1 — indirect
lodash.escaperegexp@4.1.2 — indirect
lodash.isplainobject@4.0.6 — indirect
lodash.isstring@4.0.1 — indirect
lodash.uniqby@4.7.0 — indirect
mime-db@1.54.0 — indirect
type-fest@2.19.0 — indirect
default-browser@5.5.1 — indirect
define-lazy-prop@3.0.0 — indirect
is-inside-container@1.0.0 — indirect
wsl-utils@0.1.0 — indirect
chalk@5.6.2 — indirect
cli-cursor@5.0.0 — indirect
cli-spinners@2.9.2 — indirect
is-interactive@2.0.0 — indirect
is-unicode-supported@2.1.0 — indirect
log-symbols@6.0.0 — indirect
stdin-discarder@0.2.2 — indirect
string-width@7.2.0 — indirect
strip-ansi@7.2.0 — indirect
macos-release@3.5.1 — indirect
windows-release@6.1.0 — indirect
agent-base@7.1.4 — indirect
debug@4.4.3 — indirect
http-proxy-agent@7.0.2 — indirect
https-proxy-agent@7.0.6 — indirect
lru-cache@7.18.3 — indirect
pac-proxy-agent@7.2.0 — indirect
proxy-from-env@1.1.0 — indirect
socks-proxy-agent@8.0.5 — indirect
fdir@6.5.0 — indirect
picomatch@4.0.7 — indirect
@octokit/auth-token@5.1.2 — indirect
@octokit/graphql@8.2.2 — indirect
@octokit/request@9.2.4 — indirect
@octokit/request-error@6.1.8 — indirect
@octokit/types@14.1.0 — indirect
before-after-hook@3.0.2 — indirect
universal-user-agent@7.0.3 — indirect
@octokit/types@13.10.0 — indirect
@octokit/types@13.10.0 — indirect
readdirp@4.1.2 — indirect
citty@0.1.6 — indirect
consola@3.4.2 — indirect
node-fetch-native@1.6.7 — indirect
nypm@0.6.12 — indirect
confbox@0.3.1 — indirect
destr@2.0.5 — indirect
is-ssh@1.4.1 — indirect
parse-url@9.2.0 — indirect
@inquirer/ansi@1.0.2 — indirect
@inquirer/figures@1.0.15 — indirect
cli-width@4.1.0 — indirect
signal-exit@4.1.0 — indirect
wrap-ansi@6.2.0 — indirect
yoctocolors-cjs@2.1.3 — indirect
@inquirer/checkbox@4.3.2 — indirect
@inquirer/confirm@5.1.21 — indirect
@inquirer/editor@4.2.23 — indirect
@inquirer/expand@4.0.23 — indirect
@inquirer/input@4.3.1 — indirect
@inquirer/number@3.0.23 — indirect
@inquirer/password@4.0.23 — indirect
@inquirer/rawlist@4.1.11 — indirect
@inquirer/search@3.2.2 — indirect
@inquirer/select@4.4.2 — indirect
type-fest@0.21.3 — indirect
tslib@2.8.1 — indirect
bundle-name@4.1.1 — indirect
default-browser-id@5.0.1 — indirect
is-docker@3.0.0 — indirect
is-wsl@3.1.1 — indirect
restore-cursor@5.1.0 — indirect
is-unicode-supported@1.3.0 — indirect
emoji-regex@10.6.0 — indirect
get-east-asian-width@1.7.0 — indirect
ansi-regex@6.4.0 — indirect
execa@8.0.1 — indirect
ms@2.1.3 — indirect
@tootallnate/quickjs-emscripten@0.23.0 — indirect
get-uri@6.0.5 — indirect
pac-resolver@7.0.1 — indirect
socks@2.8.10 — indirect
@octokit/endpoint@10.1.4 — indirect
fast-content-type-parse@2.0.1 — indirect
@octokit/openapi-types@25.1.0 — indirect
@octokit/openapi-types@24.2.0 — indirect
@octokit/openapi-types@24.2.0 — indirect
citty@0.2.2 — indirect
tinyexec@1.3.1 — indirect
protocols@2.0.2 — indirect
@types/parse-path@7.1.0 — indirect
parse-path@7.1.0 — indirect
ansi-styles@4.3.0 — indirect
string-width@4.2.3 — indirect
strip-ansi@6.0.1 — indirect
@inquirer/external-editor@1.0.3 — indirect
run-applescript@7.1.0 — indirect
onetime@7.0.0 — indirect
cross-spawn@7.0.6 — indirect
get-stream@8.0.1 — indirect
human-signals@5.0.0 — indirect
is-stream@3.0.0 — indirect
merge-stream@2.0.0 — indirect
npm-run-path@5.3.0 — indirect
onetime@6.0.0 — indirect
strip-final-newline@3.0.0 — indirect
basic-ftp@5.3.1 — indirect
data-uri-to-buffer@6.0.2 — indirect
degenerator@5.0.1 — indirect
netmask@2.1.1 — indirect
ip-address@10.7.5 — indirect
smart-buffer@4.2.0 — indirect
color-convert@2.0.1 — indirect
emoji-regex@8.0.0 — indirect
is-fullwidth-code-point@3.0.0 — indirect
ansi-regex@5.0.1 — indirect
chardet@2.2.0 — indirect
iconv-lite@0.7.3 — indirect
mimic-function@5.0.1 — indirect
path-key@3.1.1 — indirect
shebang-command@2.0.0 — indirect
which@2.0.2 — indirect
path-key@4.0.0 — indirect
mimic-fn@4.0.0 — indirect
ast-types@0.13.4 — indirect
escodegen@2.1.0 — indirect
esprima@4.0.1 — indirect
color-name@1.1.4 — indirect
safer-buffer@2.1.2 — indirect
shebang-regex@3.0.0 — indirect
isexe@2.0.0 — indirect
estraverse@5.3.0 — indirect
esutils@2.0.3 — indirect
source-map@0.6.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Code-Review	1/10 — Found 5/30 approved changesets -- score normalized to 1
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	10/10 — all dependencies are pinned
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Security-Policy	0/10 — security policy file not detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Branch-Protection	1/10 — branch protection is not maximal on development and all release branches
SAST	8/10 — SAST tool detected but not run on all commits

Evidence and freshness

https://registry.npmjs.org/release-it/19.0.4 — retrieved 2026-10-31T07:47:31.242Z
https://api.deps.dev/v3/systems/npm/packages/release-it/versions/19.0.4 — retrieved 2026-10-31T07:47:31.654Z
https://api.deps.dev/v3/systems/npm/packages/release-it/versions/19.0.4:dependencies — retrieved 2026-10-31T07:47:31.685Z
https://api.deps.dev/v3/projects/github.com%2Frelease-it%2Frelease-it — retrieved 2026-10-31T07:47:32.044Z