yo 1.1.0

CLI tool for scaffolding out Yeoman projects

yo@1.1.0 was published on 2014-01-01. Its manifest declares 11 runtime dependencies and 2 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.8.0.

All yo versions · Permanent reference to 1.1.0 · Latest release

Package specifications

Version	1.1.0
License declaration	MIT
Published	2014-01-01T20:36:31.597Z
Node.js requirement	>=0.8.0
Type declarations	Not declared
Runtime dependency count	11
Peer requirement count	2
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	210
Repository stars	3964
Repository forks	405

Install yo 1.1.0

npm install yo@1.1.0
pnpm add yo@1.1.0
yarn add yo@1.1.0

Runtime dependencies

nopt ~2.1.1
open 0.0.4
async ~0.2.9
chalk ~0.4.0
findup ~0.1.3
lodash ~2.4.1
insight ~0.3.0
shelljs ~0.2.6
sudo-block ~0.3.0
update-notifier ~0.1.3
yeoman-generator ~0.15.0

Peer requirements

bower >=0.9.0
grunt-cli ~0.1.7

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

async@0.2.10 — direct
chalk@0.4.0 — direct
findup@0.1.5 — direct
insight@0.3.1 — direct
lodash@2.4.2 — direct
nopt@2.1.2 — direct
open@0.0.4 — direct
shelljs@0.2.6 — direct
sudo-block@0.3.0 — direct
update-notifier@0.1.10 — direct
yeoman-generator@0.15.0 — direct
ansi-styles@1.0.0 — indirect
has-color@0.1.7 — indirect
strip-ansi@0.1.1 — indirect
colors@0.6.2 — indirect
commander@2.1.0 — indirect
configstore@0.2.3 — indirect
inquirer@0.4.1 — indirect
lodash.debounce@2.4.1 — indirect
object-assign@0.1.2 — indirect
request@2.27.0 — indirect
abbrev@1.1.1 — indirect
chalk@0.3.0 — indirect
configstore@0.3.2 — indirect
request@2.88.2 — indirect
semver@2.3.2 — indirect
cheerio@0.13.1 — indirect
class-extend@0.1.2 — indirect
dargs@0.1.0 — indirect
debug@0.7.4 — indirect
diff@1.0.8 — indirect
download@0.1.19 — indirect
file-utils@0.1.5 — indirect
findup-sync@0.1.3 — indirect
glob@3.2.11 — indirect
iconv-lite@0.2.11 — indirect
isbinaryfile@2.0.4 — indirect
mime@1.2.11 — indirect
mkdirp@0.3.5 — indirect
request@2.30.0 — indirect
rimraf@2.2.8 — indirect
text-table@0.2.0 — indirect
underscore.string@2.3.3 — indirect
graceful-fs@2.0.3 — indirect
js-yaml@3.0.2 — indirect
osenv@0.0.3 — indirect
uuid@1.4.2 — indirect
cli-color@0.2.3 — indirect
mute-stream@0.0.4 — indirect
readline2@0.1.1 — indirect
through@2.3.8 — indirect
lodash.isfunction@2.4.1 — indirect
lodash.isobject@2.4.1 — indirect
lodash.now@2.4.1 — indirect
aws-sign@0.3.0 — indirect
cookie-jar@0.3.0 — indirect
forever-agent@0.5.2 — indirect
form-data@0.1.4 — indirect
hawk@1.0.0 — indirect
http-signature@0.10.1 — indirect
json-stringify-safe@5.0.1 — indirect
node-uuid@1.4.8 — indirect
oauth-sign@0.3.0 — indirect
qs@0.6.6 — indirect
tunnel-agent@0.3.0 — indirect
ansi-styles@0.2.0 — indirect
graceful-fs@3.0.12 — indirect
js-yaml@3.15.2 — indirect
mkdirp@0.5.6 — indirect
object-assign@2.1.1 — indirect
osenv@0.1.5 — indirect
user-home@1.1.1 — indirect
uuid@2.0.3 — indirect
xdg-basedir@1.0.1 — indirect
aws-sign2@0.7.0 — indirect
aws4@1.13.2 — indirect
caseless@0.12.0 — indirect
combined-stream@1.0.8 — indirect
extend@3.0.2 — indirect
forever-agent@0.6.1 — indirect
form-data@2.3.3 — indirect
har-validator@5.1.5 — indirect
http-signature@1.2.0 — indirect
is-typedarray@1.0.0 — indirect
isstream@0.1.2 — indirect
mime-types@2.1.35 — indirect
oauth-sign@0.9.0 — indirect
performance-now@2.1.0 — indirect
qs@6.5.5 — indirect
safe-buffer@5.2.1 — indirect
tough-cookie@2.5.0 — indirect
tunnel-agent@0.6.0 — indirect
uuid@3.4.0 — indirect
CSSselect@0.4.1 — indirect
entities@0.5.0 — indirect
htmlparser2@3.4.0 — indirect
underscore@1.5.2 — indirect
object-assign@2.1.1 — indirect
decompress@0.2.5 — indirect
each-async@0.1.3 — indirect
get-stdin@0.1.0 — indirect
get-urls@0.1.2 — indirect
nopt@2.2.1 — indirect
request@2.88.2 — indirect
through2@0.4.2 — indirect
isbinaryfile@0.1.9 — indirect
lodash@2.1.0 — indirect
minimatch@0.2.14 — indirect
inherits@2.0.4 — indirect
minimatch@0.3.0 — indirect
aws-sign2@0.5.0 — indirect
tough-cookie@0.9.15 — indirect
argparse@0.1.16 — indirect
esprima@1.0.4 — indirect
es5-ext@0.9.2 — indirect
memoizee@0.2.6 — indirect
strip-ansi@2.0.1 — indirect
lodash._objecttypes@2.4.1 — indirect
lodash._isnative@2.4.1 — indirect
async@0.9.2 — indirect
combined-stream@0.0.7 — indirect
boom@0.4.2 — indirect
cryptiles@0.2.2 — indirect
hoek@0.9.1 — indirect
sntp@0.2.4 — indirect
asn1@0.1.11 — indirect
assert-plus@0.1.5 — indirect
ctype@0.5.3 — indirect
natives@1.1.6 — indirect
argparse@1.0.10 — indirect
esprima@4.0.1 — indirect
minimist@1.2.8 — indirect
os-homedir@1.0.2 — indirect
os-tmpdir@1.0.2 — indirect
delayed-stream@1.0.0 — indirect
asynckit@0.4.0 — indirect
ajv@6.15.0 — indirect
har-schema@2.0.0 — indirect
assert-plus@1.0.0 — indirect
jsprim@1.4.2 — indirect
sshpk@1.18.0 — indirect
mime-db@1.52.0 — indirect
psl@1.15.0 — indirect
punycode@2.3.1 — indirect
CSSwhat@0.4.7 — indirect
domutils@1.4.3 — indirect
domelementtype@1.3.1 — indirect
domhandler@2.2.1 — indirect
domutils@1.3.0 — indirect
readable-stream@1.1.14 — indirect
adm-zip@0.4.16 — indirect
ext-name@1.0.1 — indirect
nopt@2.2.1 — indirect
stream-combiner@0.0.4 — indirect
tar@0.1.20 — indirect
tempfile@0.1.3 — indirect
combined-stream@1.0.8 — indirect
forever-agent@0.6.1 — indirect
form-data@2.3.3 — indirect
http-signature@1.2.0 — indirect
oauth-sign@0.9.0 — indirect
qs@6.5.5 — indirect
tunnel-agent@0.6.0 — indirect
uuid@3.4.0 — indirect
readable-stream@1.0.34 — indirect
xtend@2.1.2 — indirect
lru-cache@2.7.3 — indirect
sigmund@1.0.1 — indirect
underscore@1.7.0 — indirect
underscore.string@2.4.0 — indirect
event-emitter@0.2.2 — indirect
next-tick@0.1.0 — indirect
ansi-regex@1.1.1 — indirect
delayed-stream@0.0.5 — indirect
sprintf-js@1.0.3 — indirect
fast-deep-equal@3.1.3 — indirect
fast-json-stable-stringify@2.1.0 — indirect
json-schema-traverse@0.4.1 — indirect
uri-js@4.4.1 — indirect
assert-plus@1.0.0 — indirect
extsprintf@1.3.0 — indirect
json-schema@0.4.0 — indirect
verror@1.10.0 — indirect
asn1@0.2.6 — indirect
assert-plus@1.0.0 — indirect
bcrypt-pbkdf@1.0.2 — indirect
dashdash@1.14.1 — indirect
ecc-jsbn@0.1.2 — indirect
getpass@0.1.7 — indirect
jsbn@0.1.1 — indirect
safer-buffer@2.1.2 — indirect
tweetnacl@0.14.5 — indirect
core-util-is@1.0.2 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
ext-list@0.2.0 — indirect
underscore.string@2.3.3 — indirect
duplexer@0.1.2 — indirect
block-stream@0.0.9 — indirect
fstream@0.1.31 — indirect
delayed-stream@1.0.0 — indirect
assert-plus@1.0.0 — indirect
object-keys@0.4.0 — indirect
assert-plus@1.0.0 — indirect
assert-plus@1.0.0 — indirect
assert-plus@1.0.0 — indirect
got@0.2.0 — indirect
graceful-fs@3.0.12 — indirect
mkdirp@0.5.6 — indirect
object-assign@0.3.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	10/10 — no binaries found in the repo
Code-Review	1/10 — Found 2/17 approved changesets -- score normalized to 1
Maintained	0/10 — 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
Pinned-Dependencies	7/10 — dependency not pinned by hash detected -- score normalized to 7
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Packaging	10/10 — packaging workflow detected
Branch-Protection	0/10 — branch protection not enabled on development/release branches
Security-Policy	10/10 — security policy file detected
SAST	9/10 — SAST tool detected but not run on all commits

Evidence and freshness

https://registry.npmjs.org/yo/1.1.0 — retrieved 2026-10-30T21:50:06.205Z
https://api.deps.dev/v3/systems/npm/packages/yo/versions/1.1.0 — retrieved 2026-10-30T21:50:06.646Z
https://api.deps.dev/v3/systems/npm/packages/yo/versions/1.1.0:dependencies — retrieved 2026-10-30T21:50:06.685Z
https://api.deps.dev/v3/projects/github.com%2Fyeoman%2Fyo — retrieved 2026-10-30T21:50:07.061Z