yo 1.8.5

CLI tool for running Yeoman generators

yo@1.8.5 was published on 2016-09-01. Its manifest declares 30 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.12.0.

All yo versions · Permanent reference to 1.8.5 · Latest release

Package specifications

Version	1.8.5
License declaration	BSD-2-Clause
Published	2016-09-01T04:16:32.852Z
Node.js requirement	>=0.12.0
Type declarations	Not declared
Runtime dependency count	30
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	lib
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	299
Repository stars	3964
Repository forks	405

Install yo 1.8.5

npm install yo@1.8.5
pnpm add yo@1.8.5
yarn add yo@1.8.5

Runtime dependencies

got ^5.0.0
opn ^3.0.2
meow ^3.0.0
async ^1.0.0
chalk ^1.0.0
yosay ^1.0.0
lodash ^3.2.0
tabtab ^1.3.0
figures ^1.3.5
insight ^0.7.0
sort-on ^1.0.0
cli-list ^0.1.1
fullname ^2.0.0
inquirer ^0.11.0
titleize ^1.0.0
repeating ^2.0.0
user-home ^2.0.0
parse-help ^0.1.1
root-check ^1.0.0
configstore ^1.0.0
cross-spawn ^3.0.1
npm-keyword ^4.1.0
read-pkg-up ^1.0.1
package-json ^2.1.0
string-length ^1.0.0
yeoman-doctor ^2.0.0
humanize-string ^1.0.0
update-notifier ^0.6.0
yeoman-character ^1.0.0
yeoman-environment ^1.6.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

async@1.5.2 — direct
chalk@1.1.3 — direct
cli-list@0.1.8 — direct
configstore@1.4.0 — direct
cross-spawn@3.0.1 — direct
figures@1.7.0 — direct
fullname@2.1.0 — direct
got@5.7.1 — direct
humanize-string@1.0.2 — direct
inquirer@0.11.4 — direct
insight@0.7.0 — direct
lodash@3.10.1 — direct
meow@3.7.0 — direct
npm-keyword@4.2.0 — direct
opn@3.0.3 — direct
package-json@2.4.0 — direct
parse-help@0.1.1 — direct
read-pkg-up@1.0.1 — direct
repeating@2.0.1 — direct
root-check@1.0.0 — direct
sort-on@1.3.0 — direct
string-length@1.0.1 — direct
tabtab@1.3.2 — direct
titleize@1.0.1 — direct
update-notifier@0.6.3 — direct
user-home@2.0.0 — direct
yeoman-character@1.1.0 — direct
yeoman-doctor@2.1.0 — direct
yeoman-environment@1.6.6 — direct
yosay@1.2.1 — direct
ansi-styles@2.2.1 — indirect
escape-string-regexp@1.0.5 — indirect
has-ansi@2.0.0 — indirect
strip-ansi@3.0.1 — indirect
supports-color@2.0.0 — indirect
graceful-fs@4.2.11 — indirect
mkdirp@0.5.6 — indirect
object-assign@4.1.1 — indirect
os-tmpdir@1.0.2 — indirect
osenv@0.1.5 — indirect
uuid@2.0.3 — indirect
write-file-atomic@1.3.4 — indirect
xdg-basedir@2.0.0 — indirect
lru-cache@4.1.5 — indirect
which@1.3.1 — indirect
npmconf@2.1.3 — indirect
pify@2.3.0 — indirect
pinkie-promise@2.0.1 — indirect
create-error-class@3.0.2 — indirect
duplexer2@0.1.4 — indirect
is-redirect@1.0.0 — indirect
is-retry-allowed@1.2.0 — indirect
is-stream@1.1.0 — indirect
lowercase-keys@1.0.1 — indirect
node-status-codes@1.0.0 — indirect
parse-json@2.2.0 — indirect
read-all-stream@3.1.0 — indirect
readable-stream@2.3.8 — indirect
timed-out@3.1.3 — indirect
unzip-response@1.0.2 — indirect
url-parse-lax@1.0.0 — indirect
decamelize@1.2.0 — indirect
ansi-escapes@1.4.0 — indirect
ansi-regex@2.1.1 — indirect
cli-cursor@1.0.2 — indirect
cli-width@1.1.1 — indirect
readline2@1.0.1 — indirect
run-async@0.1.0 — indirect
rx-lite@3.1.2 — indirect
string-width@1.0.2 — indirect
through@2.3.8 — indirect
inquirer@0.10.1 — indirect
lodash.debounce@3.1.1 — indirect
os-name@1.0.3 — indirect
request@2.88.2 — indirect
tough-cookie@2.5.0 — indirect
camelcase-keys@2.1.0 — indirect
loud-rejection@1.6.0 — indirect
map-obj@1.0.1 — indirect
minimist@1.2.8 — indirect
normalize-package-data@2.5.0 — indirect
redent@1.0.0 — indirect
trim-newlines@1.0.0 — indirect
registry-url@3.1.0 — indirect
registry-auth-token@3.4.0 — indirect
semver@5.7.2 — indirect
execall@1.0.0 — indirect
find-up@1.1.2 — indirect
read-pkg@1.1.0 — indirect
is-finite@1.1.0 — indirect
downgrade-root@1.2.2 — indirect
sudo-block@1.2.0 — indirect
arrify@1.0.1 — indirect
dot-prop@2.4.0 — indirect
debug@2.6.9 — indirect
inquirer@1.2.3 — indirect
npmlog@2.0.4 — indirect
boxen@0.3.1 — indirect
configstore@2.1.0 — indirect
is-npm@1.0.0 — indirect
latest-version@2.0.0 — indirect
semver-diff@2.1.0 — indirect
os-homedir@1.0.2 — indirect
supports-color@3.2.3 — indirect
bin-version-check@2.1.0 — indirect
each-async@1.1.1 — indirect
log-symbols@1.0.2 — indirect
object-values@1.0.0 — indirect
semver@5.7.2 — indirect
twig@0.8.9 — indirect
diff@2.2.3 — indirect
globby@4.1.0 — indirect
grouped-queue@0.3.3 — indirect
inquirer@1.2.3 — indirect
lodash@4.18.1 — indirect
mem-fs@1.2.0 — indirect
text-table@0.2.0 — indirect
untildify@2.1.0 — indirect
cli-boxes@1.0.0 — indirect
pad-component@0.0.1 — indirect
taketalk@1.0.0 — indirect
wrap-ansi@2.1.0 — indirect
imurmurhash@0.1.4 — indirect
slide@1.1.6 — indirect
pseudomap@1.0.2 — indirect
yallist@2.1.2 — indirect
isexe@2.0.0 — indirect
config-chain@1.1.13 — indirect
inherits@2.0.4 — indirect
ini@1.3.8 — indirect
nopt@3.0.6 — indirect
once@1.3.3 — indirect
safe-buffer@5.2.1 — indirect
semver@4.3.6 — indirect
uid-number@0.0.5 — indirect
pinkie@2.0.4 — indirect
capture-stack-trace@1.0.2 — indirect
error-ex@1.3.4 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
prepend-http@1.0.4 — indirect
restore-cursor@1.0.1 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
mute-stream@0.0.5 — indirect
lodash._getnative@3.9.1 — indirect
osx-release@1.1.0 — indirect
win-release@1.1.1 — indirect
aws-sign2@0.7.0 — indirect
aws4@1.13.2 — indirect
caseless@0.12.0 — indirect
combined-stream@1.0.8 — indirect
extend@3.0.2 — indirect
forever-agent@0.6.1 — indirect
form-data@2.3.3 — indirect
har-validator@5.1.5 — indirect
http-signature@1.2.0 — indirect
is-typedarray@1.0.0 — indirect
isstream@0.1.2 — indirect
json-stringify-safe@5.0.1 — indirect
mime-types@2.1.35 — indirect
oauth-sign@0.9.0 — indirect
performance-now@2.1.0 — indirect
qs@6.5.5 — indirect
tunnel-agent@0.6.0 — indirect
uuid@3.4.0 — indirect
psl@1.15.0 — indirect
punycode@2.3.1 — indirect
camelcase@2.1.1 — indirect
currently-unhandled@0.4.1 — indirect
signal-exit@3.0.7 — indirect
hosted-git-info@2.8.9 — indirect
resolve@1.22.13 — indirect
validate-npm-package-license@3.0.4 — indirect
indent-string@2.1.0 — indirect
strip-indent@1.0.1 — indirect
rc@1.2.8 — indirect
clone-regexp@1.0.1 — indirect
path-exists@2.1.0 — indirect
load-json-file@1.1.0 — indirect
path-type@1.1.0 — indirect
default-uid@1.0.0 — indirect
is-root@1.0.0 — indirect
is-docker@1.1.0 — indirect
is-obj@1.0.1 — indirect
ms@2.0.0 — indirect
cli-width@2.2.1 — indirect
external-editor@1.1.1 — indirect
lodash@4.18.1 — indirect
mute-stream@0.0.6 — indirect
run-async@2.4.1 — indirect
rx@4.1.0 — indirect
ansi@0.3.1 — indirect
are-we-there-yet@1.1.7 — indirect
gauge@1.2.7 — indirect
filled-array@1.1.0 — indirect
widest-line@1.0.0 — indirect
dot-prop@3.0.0 — indirect
semver@5.7.2 — indirect
has-flag@1.0.0 — indirect
bin-version@1.0.4 — indirect
semver-truncate@1.1.2 — indirect
onetime@1.1.0 — indirect
set-immediate-shim@1.0.1 — indirect
minimatch@3.0.8 — indirect
walk@2.3.15 — indirect
array-union@1.0.2 — indirect
glob@6.0.4 — indirect
lodash@4.18.1 — indirect
cli-width@2.2.1 — indirect
mute-stream@0.0.6 — indirect
run-async@2.4.1 — indirect
through2@3.0.2 — indirect
vinyl@2.2.1 — indirect
vinyl-file@3.0.0 — indirect
get-stdin@4.0.1 — indirect
proto-list@1.2.4 — indirect
abbrev@1.1.1 — indirect
wrappy@1.0.2 — indirect
is-arrayish@0.2.1 — indirect
safe-buffer@5.1.2 — indirect
exit-hook@1.1.1 — indirect
number-is-nan@1.0.1 — indirect
semver@5.7.2 — indirect
delayed-stream@1.0.0 — indirect
asynckit@0.4.0 — indirect
ajv@6.15.0 — indirect
har-schema@2.0.0 — indirect
assert-plus@1.0.0 — indirect
jsprim@1.4.2 — indirect
sshpk@1.18.0 — indirect
mime-db@1.52.0 — indirect
array-find-index@1.0.2 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
deep-extend@0.6.0 — indirect
strip-json-comments@2.0.1 — indirect
is-regexp@1.0.0 — indirect
is-supported-regexp-flag@1.0.1 — indirect
strip-bom@2.0.0 — indirect
spawn-sync@1.0.15 — indirect
tmp@0.0.29 — indirect
delegates@1.0.0 — indirect
has-unicode@2.0.1 — indirect
lodash.pad@4.5.1 — indirect
lodash.padend@4.6.1 — indirect
lodash.padstart@4.6.1 — indirect
find-versions@1.2.1 — indirect
semver@5.7.2 — indirect
brace-expansion@1.1.21 — indirect
foreachasync@3.0.0 — indirect
array-uniq@1.0.3 — indirect
inflight@1.0.6 — indirect
path-is-absolute@1.0.1 — indirect
clone@2.1.2 — indirect
clone-buffer@1.0.0 — indirect
clone-stats@1.0.0 — indirect
cloneable-readable@1.1.3 — indirect
remove-trailing-separator@1.1.0 — indirect
replace-ext@1.0.1 — indirect
strip-bom-buf@1.0.0 — indirect
strip-bom-stream@2.0.0 — indirect
fast-deep-equal@3.1.3 — indirect
fast-json-stable-stringify@2.1.0 — indirect
json-schema-traverse@0.4.1 — indirect
uri-js@4.4.1 — indirect
extsprintf@1.3.0 — indirect
json-schema@0.4.0 — indirect
verror@1.10.0 — indirect
asn1@0.2.6 — indirect
bcrypt-pbkdf@1.0.2 — indirect
dashdash@1.14.1 — indirect
ecc-jsbn@0.1.2 — indirect
getpass@0.1.7 — indirect
jsbn@0.1.1 — indirect
safer-buffer@2.1.2 — indirect
tweetnacl@0.14.5 — indirect
hasown@2.0.4 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
is-utf8@0.2.1 — indirect
concat-stream@1.6.2 — indirect
os-shim@0.1.3 — indirect
semver-regex@1.0.0 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
first-chunk-stream@2.0.0 — indirect
core-util-is@1.0.2 — indirect
function-bind@1.1.2 — indirect
buffer-from@1.1.2 — indirect
typedarray@0.0.6 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	10/10 — no binaries found in the repo
Code-Review	1/10 — Found 2/17 approved changesets -- score normalized to 1
Maintained	0/10 — 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
Pinned-Dependencies	7/10 — dependency not pinned by hash detected -- score normalized to 7
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Packaging	10/10 — packaging workflow detected
Branch-Protection	0/10 — branch protection not enabled on development/release branches
Security-Policy	10/10 — security policy file detected
SAST	9/10 — SAST tool detected but not run on all commits

Evidence and freshness

https://registry.npmjs.org/yo/1.8.5 — retrieved 2026-10-30T21:50:16.666Z
https://api.deps.dev/v3/systems/npm/packages/yo/versions/1.8.5 — retrieved 2026-10-30T21:50:17.142Z
https://api.deps.dev/v3/systems/npm/packages/yo/versions/1.8.5:dependencies — retrieved 2026-10-30T21:50:17.190Z
https://api.deps.dev/v3/projects/github.com%2Fyeoman%2Fyo — retrieved 2026-10-30T21:50:17.524Z