snyk 1.122.4

snyk library and cli utility

snyk@1.122.4 was published on 2019-01-26. Its manifest declares 40 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=4.

Deprecated: A medium severity vulnerability was found in the Snyk CLI version you are using. We fixed the vulnerability in version 1.996.0. We recommend updating to the latest version. More details here: https://snyk.co/ue1NS

All snyk versions · Permanent reference to 1.122.4 · Latest release

Package specifications

Version	1.122.4
License declaration	Apache-2.0
Published	2019-01-26T21:22:32.210Z
Node.js requirement	>=4
Type declarations	Not declared
Runtime dependency count	40
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	506.75 KiB
Published file count	172
Package type	Not declared
ES module entry	Not declared
Default entry	dist/lib/index.js
Side effects declaration	Not declared
Direct advisories	4
Resolved graph dependencies	268
Repository stars	5687
Repository forks	700

Install snyk 1.122.4

npm install snyk@1.122.4
pnpm add snyk@1.122.4
yarn add snyk@1.122.4

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@snyk/dep-graph@1.1.2 — direct
@snyk/gemfile@1.1.0 — direct
abbrev@1.1.1 — direct
ansi-escapes@3.2.0 — direct
chalk@2.4.2 — direct
configstore@3.1.5 — direct
debug@3.2.7 — direct
get-uri@2.0.2 — direct
hasbin@1.2.3 — direct
inquirer@3.3.0 — direct
lodash@4.18.1 — direct
needle@2.9.1 — direct
opn@5.5.0 — direct
os-name@2.0.1 — direct
proxy-agent@2.3.1 — direct
proxy-from-env@1.1.0 — direct
recursive-readdir@2.2.3 — direct
semver@5.7.2 — direct
snyk-config@2.2.0 — direct
snyk-docker-plugin@1.18.1 — direct
snyk-go-plugin@1.6.1 — direct
snyk-gradle-plugin@2.1.3 — direct
snyk-module@1.9.1 — direct
snyk-mvn-plugin@2.0.1 — direct
snyk-nodejs-lockfile-parser@1.10.1 — direct
snyk-nuget-plugin@1.6.5 — direct
snyk-php-plugin@1.5.2 — direct
snyk-policy@1.13.3 — direct
snyk-python-plugin@1.9.1 — direct
snyk-resolve@1.0.1 — direct
snyk-resolve-deps@4.0.2 — direct
snyk-sbt-plugin@2.0.1 — direct
snyk-tree@1.0.0 — direct
snyk-try-require@1.3.1 — direct
source-map-support@0.5.21 — direct
tempfile@2.0.0 — direct
then-fs@2.0.0 — direct
undefsafe@2.0.5 — direct
update-notifier@2.5.0 — direct
uuid@3.4.0 — direct
graphlib@2.1.8 — indirect
tslib@1.14.1 — indirect
ansi-styles@3.2.1 — indirect
escape-string-regexp@1.0.5 — indirect
supports-color@5.5.0 — indirect
dot-prop@4.2.1 — indirect
graceful-fs@4.2.11 — indirect
make-dir@1.3.0 — indirect
unique-string@1.0.0 — indirect
write-file-atomic@2.4.3 — indirect
xdg-basedir@3.0.0 — indirect
ms@2.1.3 — indirect
data-uri-to-buffer@1.2.0 — indirect
debug@2.6.9 — indirect
extend@3.0.2 — indirect
file-uri-to-path@1.0.0 — indirect
ftp@0.3.10 — indirect
readable-stream@2.3.8 — indirect
async@1.5.2 — indirect
cli-cursor@2.1.0 — indirect
cli-width@2.2.1 — indirect
external-editor@2.2.0 — indirect
figures@2.0.0 — indirect
mute-stream@0.0.7 — indirect
run-async@2.4.1 — indirect
rx-lite@4.0.8 — indirect
rx-lite-aggregates@4.0.8 — indirect
string-width@2.1.1 — indirect
strip-ansi@4.0.0 — indirect
through@2.3.8 — indirect
iconv-lite@0.4.24 — indirect
sax@1.6.1 — indirect
is-wsl@1.1.0 — indirect
macos-release@1.1.0 — indirect
win-release@1.1.1 — indirect
agent-base@4.3.0 — indirect
http-proxy-agent@2.1.0 — indirect
https-proxy-agent@2.2.4 — indirect
lru-cache@4.1.5 — indirect
pac-proxy-agent@2.0.2 — indirect
socks-proxy-agent@3.0.1 — indirect
minimatch@3.1.5 — indirect
nconf@0.10.0 — indirect
dockerfile-ast@0.0.12 — indirect
tmp@0.0.33 — indirect
toml@2.3.6 — indirect
clone-deep@0.3.0 — indirect
hosted-git-info@2.8.9 — indirect
@yarnpkg/lockfile@1.1.0 — indirect
lodash@4.17.10 — indirect
jszip@3.10.2 — indirect
xml2js@0.4.23 — indirect
email-validator@2.0.4 — indirect
js-yaml@3.15.2 — indirect
lodash.clonedeep@4.5.0 — indirect
ansicolors@0.3.2 — indirect
lodash.assign@4.2.0 — indirect
lodash.assignin@4.2.0 — indirect
lodash.clone@4.5.0 — indirect
lodash.flatten@4.4.0 — indirect
lodash.get@4.4.2 — indirect
lodash.set@4.3.2 — indirect
archy@1.0.0 — indirect
buffer-from@1.1.2 — indirect
source-map@0.6.1 — indirect
temp-dir@1.0.0 — indirect
promise@7.3.1 — indirect
boxen@1.3.0 — indirect
import-lazy@2.1.0 — indirect
is-ci@1.2.1 — indirect
is-installed-globally@0.1.0 — indirect
is-npm@1.0.0 — indirect
latest-version@3.1.0 — indirect
semver-diff@2.1.0 — indirect
color-convert@1.9.3 — indirect
has-flag@3.0.0 — indirect
is-obj@1.0.1 — indirect
pify@3.0.0 — indirect
crypto-random-string@1.0.0 — indirect
imurmurhash@0.1.4 — indirect
signal-exit@3.0.7 — indirect
ms@2.0.0 — indirect
readable-stream@1.1.14 — indirect
xregexp@2.0.0 — indirect
core-util-is@1.0.3 — indirect
inherits@2.0.4 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
restore-cursor@2.0.0 — indirect
chardet@0.4.2 — indirect
is-fullwidth-code-point@2.0.0 — indirect
ansi-regex@3.0.1 — indirect
safer-buffer@2.1.2 — indirect
es6-promisify@5.0.0 — indirect
debug@3.1.0 — indirect
pseudomap@1.0.2 — indirect
yallist@2.1.2 — indirect
pac-resolver@3.0.0 — indirect
raw-body@2.5.3 — indirect
socks@1.1.10 — indirect
brace-expansion@1.1.21 — indirect
ini@1.3.8 — indirect
secure-keys@1.0.0 — indirect
yargs@3.32.0 — indirect
vscode-languageserver-types@3.18.5 — indirect
os-tmpdir@1.0.2 — indirect
for-own@1.0.0 — indirect
is-plain-object@2.0.4 — indirect
kind-of@3.2.2 — indirect
shallow-clone@0.1.2 — indirect
lie@3.3.0 — indirect
pako@1.0.11 — indirect
setimmediate@1.0.5 — indirect
xmlbuilder@11.0.1 — indirect
argparse@1.0.10 — indirect
esprima@4.0.1 — indirect
asap@2.0.6 — indirect
ansi-align@2.0.0 — indirect
camelcase@4.1.0 — indirect
cli-boxes@1.0.0 — indirect
term-size@1.2.0 — indirect
widest-line@2.0.1 — indirect
ci-info@1.6.0 — indirect
global-dirs@0.1.1 — indirect
is-path-inside@1.0.1 — indirect
package-json@4.0.1 — indirect
color-name@1.1.3 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
onetime@2.0.1 — indirect
es6-promise@4.2.8 — indirect
ms@2.0.0 — indirect
co@4.6.0 — indirect
degenerator@1.0.4 — indirect
ip@1.1.9 — indirect
netmask@1.0.6 — indirect
thunkify@2.1.2 — indirect
bytes@3.1.2 — indirect
http-errors@2.0.1 — indirect
unpipe@1.0.0 — indirect
smart-buffer@1.1.15 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
camelcase@2.1.1 — indirect
cliui@3.2.0 — indirect
decamelize@1.2.0 — indirect
os-locale@1.4.0 — indirect
string-width@1.0.2 — indirect
window-size@0.1.4 — indirect
y18n@3.2.2 — indirect
for-in@1.0.2 — indirect
isobject@3.0.1 — indirect
is-buffer@1.1.6 — indirect
is-extendable@0.1.1 — indirect
kind-of@2.0.1 — indirect
lazy-cache@0.2.7 — indirect
mixin-object@2.0.1 — indirect
immediate@3.0.6 — indirect
sprintf-js@1.0.3 — indirect
execa@0.7.0 — indirect
path-is-inside@1.0.2 — indirect
got@6.7.1 — indirect
registry-auth-token@3.4.0 — indirect
registry-url@3.1.0 — indirect
mimic-fn@1.2.0 — indirect
ast-types@0.16.3 — indirect
escodegen@1.14.3 — indirect
esprima@3.1.3 — indirect
depd@2.0.0 — indirect
setprototypeof@1.2.0 — indirect
statuses@2.0.2 — indirect
toidentifier@1.0.1 — indirect
string-width@1.0.2 — indirect
strip-ansi@3.0.1 — indirect
wrap-ansi@2.1.0 — indirect
lcid@1.0.0 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
strip-ansi@3.0.1 — indirect
for-in@0.1.8 — indirect
cross-spawn@5.1.0 — indirect
get-stream@3.0.0 — indirect
is-stream@1.1.0 — indirect
npm-run-path@2.0.2 — indirect
p-finally@1.0.0 — indirect
strip-eof@1.0.0 — indirect
create-error-class@3.0.2 — indirect
duplexer3@0.1.5 — indirect
is-redirect@1.0.0 — indirect
is-retry-allowed@1.2.0 — indirect
lowercase-keys@1.0.1 — indirect
timed-out@4.0.1 — indirect
unzip-response@2.0.1 — indirect
url-parse-lax@1.0.0 — indirect
rc@1.2.8 — indirect
tslib@2.8.1 — indirect
esprima@4.0.1 — indirect
estraverse@4.3.0 — indirect
esutils@2.0.3 — indirect
optionator@0.8.3 — indirect
is-fullwidth-code-point@1.0.0 — indirect
ansi-regex@2.1.1 — indirect
string-width@1.0.2 — indirect
strip-ansi@3.0.1 — indirect
invert-kv@1.0.0 — indirect
number-is-nan@1.0.1 — indirect
ansi-regex@2.1.1 — indirect
shebang-command@1.2.0 — indirect
which@1.3.1 — indirect
path-key@2.0.1 — indirect
capture-stack-trace@1.0.2 — indirect
prepend-http@1.0.4 — indirect
deep-extend@0.6.0 — indirect
minimist@1.2.8 — indirect
strip-json-comments@2.0.1 — indirect
deep-is@0.1.4 — indirect
fast-levenshtein@2.0.6 — indirect
levn@0.3.0 — indirect
prelude-ls@1.1.2 — indirect
type-check@0.3.2 — indirect
word-wrap@1.2.5 — indirect
is-fullwidth-code-point@1.0.0 — indirect
ansi-regex@2.1.1 — indirect
shebang-regex@1.0.0 — indirect
isexe@2.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	10/10 — all changesets reviewed
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Maintained	10/10 — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	10/10 — security policy file detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
License	9/10 — license file detected
Binary-Artifacts	0/10 — binaries present in source code
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Signed-Releases	8/10 — 5 out of the last 5 releases have a total of 5 signed artifacts.
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
Fuzzing	0/10 — project is not fuzzed

Evidence and freshness

https://registry.npmjs.org/snyk/1.122.4 — retrieved 2026-10-30T11:49:51.753Z
https://api.deps.dev/v3/systems/npm/packages/snyk/versions/1.122.4 — retrieved 2026-10-30T11:49:52.202Z
https://api.deps.dev/v3/systems/npm/packages/snyk/versions/1.122.4:dependencies — retrieved 2026-10-30T11:49:52.238Z
https://api.deps.dev/v3/projects/github.com%2Fsnyk%2Fsnyk — retrieved 2026-10-30T11:49:52.740Z