yargs 8.0.2

yargs the modern, pirate-themed, successor to optimist.

yargs@8.0.2 was published on 2017-06-12. Its manifest declares 13 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

All yargs versions · Permanent reference to 8.0.2 · Latest release

Package specifications

Version	8.0.2
License declaration	MIT
Published	2017-06-12T23:30:46.664Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	13
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	./index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	74
Repository stars	11505
Repository forks	1058

Install yargs 8.0.2

npm install yargs@8.0.2
pnpm add yargs@8.0.2
yarn add yargs@8.0.2

Runtime dependencies

y18n ^3.2.1
cliui ^3.2.0
camelcase ^4.1.0
os-locale ^2.0.0
decamelize ^1.1.1
read-pkg-up ^2.0.0
set-blocking ^2.0.0
string-width ^2.0.0
which-module ^2.0.0
yargs-parser ^7.0.0
get-caller-file ^1.0.1
require-directory ^2.1.1
require-main-filename ^1.0.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

camelcase@4.1.0 — direct
cliui@3.2.0 — direct
decamelize@1.2.0 — direct
get-caller-file@1.0.3 — direct
os-locale@2.1.0 — direct
read-pkg-up@2.0.0 — direct
require-directory@2.1.1 — direct
require-main-filename@1.0.1 — direct
set-blocking@2.0.0 — direct
string-width@2.1.1 — direct
which-module@2.0.1 — direct
y18n@3.2.2 — direct
yargs-parser@7.0.0 — direct
string-width@1.0.2 — indirect
strip-ansi@3.0.1 — indirect
wrap-ansi@2.1.0 — indirect
execa@0.7.0 — indirect
lcid@1.0.0 — indirect
mem@1.1.0 — indirect
find-up@2.1.0 — indirect
read-pkg@2.0.0 — indirect
is-fullwidth-code-point@2.0.0 — indirect
strip-ansi@4.0.0 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
ansi-regex@2.1.1 — indirect
string-width@1.0.2 — indirect
cross-spawn@5.1.0 — indirect
get-stream@3.0.0 — indirect
is-stream@1.1.0 — indirect
npm-run-path@2.0.2 — indirect
p-finally@1.0.0 — indirect
signal-exit@3.0.7 — indirect
strip-eof@1.0.0 — indirect
invert-kv@1.0.0 — indirect
mimic-fn@1.2.0 — indirect
locate-path@2.0.0 — indirect
load-json-file@2.0.0 — indirect
normalize-package-data@2.5.0 — indirect
path-type@2.0.0 — indirect
ansi-regex@3.0.1 — indirect
number-is-nan@1.0.1 — indirect
lru-cache@4.1.5 — indirect
shebang-command@1.2.0 — indirect
which@1.3.1 — indirect
path-key@2.0.1 — indirect
p-locate@2.0.0 — indirect
path-exists@3.0.0 — indirect
graceful-fs@4.2.11 — indirect
parse-json@2.2.0 — indirect
pify@2.3.0 — indirect
strip-bom@3.0.0 — indirect
hosted-git-info@2.8.9 — indirect
resolve@1.22.13 — indirect
semver@5.7.2 — indirect
validate-npm-package-license@3.0.4 — indirect
pseudomap@1.0.2 — indirect
yallist@2.1.2 — indirect
shebang-regex@1.0.0 — indirect
isexe@2.0.0 — indirect
p-limit@1.3.0 — indirect
error-ex@1.3.4 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
p-try@1.0.0 — indirect
is-arrayish@0.2.1 — indirect
hasown@2.0.4 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
function-bind@1.1.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Maintained	10/10 — 16 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10
Code-Review	6/10 — Found 16/26 approved changesets -- score normalized to 6
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	9/10 — dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Security-Policy	0/10 — security policy file not detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/yargs/8.0.2 — retrieved 2026-10-29T08:47:05.743Z
https://api.deps.dev/v3/projects/github.com%2Fyargs%2Fyargs — retrieved 2026-10-29T05:58:28.988Z
https://api.deps.dev/v3/systems/npm/packages/yargs/versions/8.0.2 — retrieved 2026-10-29T08:47:06.285Z
https://api.deps.dev/v3/systems/npm/packages/yargs/versions/8.0.2:dependencies — retrieved 2026-10-29T08:47:06.312Z