Package Licenses
ISC
Dependency Licenses
ISC39
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| @isaacs/fs-minipass • 4.0.1fs read and write streams based on minipass | INDIRECT | 1 | |
| @npmcli/agent • 4.0.0the http/https agent used by the npm cli | INDIRECT | 10 | |
| @npmcli/fs • 5.0.0filesystem utilities for the npm cli | INDIRECT | 1 | |
| @npmcli/git • 7.0.2a util for spawning git from npm CLI contexts | INDIRECT | 15 | |
| @npmcli/installed-package-contents • 4.0.0Get the list of files installed in a package in node_modules, including bundled dependencies | INDIRECT | 2 | |
| @npmcli/node-gyp • 5.0.0Tools for dealing with node-gyp packages | INDIRECT | 0 | |
| @npmcli/package-json • 7.0.5Programmatic API to update package.json | INDIRECT | 26 | |
| @npmcli/promise-spawn • 9.0.1spawn processes the way the npm cli likes to do | INDIRECT | 2 | |
| @npmcli/redact • 4.0.0Redact sensitive npm information from output | INDIRECT | 0 | |
| @npmcli/run-script • 10.0.4Run a lifecycle script for a package (descendant of npm-lifecycle) | INDIRECT | 72 | |
| abbrev • 4.0.0Like ruby's abbrev module, but in js | INDIRECT | 0 | |
| cacache • 20.0.3Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache. | DIRECT | 20 | |
| fs-minipass • 3.0.3fs read and write streams based on minipass | INDIRECT | 1 | |
| graceful-fs • 4.2.11A drop-in replacement for fs, making various improvements. | INDIRECT | 0 | |
| hosted-git-info • 9.0.2Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab | INDIRECT | 1 | |
| ignore-walk • 8.0.0Nested/recursive `.gitignore`/`.npmignore` parsing and filtering. | INDIRECT | 3 | |
| ini • 6.0.0An ini encoder/decoder for node | INDIRECT | 0 | |
| make-fetch-happen • 15.0.4Opinionated, caching, retrying fetch client | INDIRECT | 41 | |
| minipass-collect • 2.0.1A Minipass stream that collects all the data into a single chunk | INDIRECT | 1 | |
| minipass-flush • 1.0.5A Minipass stream that calls a flush function before emitting 'end' | INDIRECT | 2 | |
| minipass-pipeline • 1.2.4create a pipeline of streams using Minipass | INDIRECT | 2 | |
| minipass-sized • 2.0.0A Minipass stream that raises an error if you get a different number of bytes than expected | INDIRECT | 1 | |
| minipass • 3.3.6minimal implementation of a PassThrough stream | INDIRECT | 1 | |
| nopt • 9.0.0Option parsing for Node, supporting types, shorthands, etc. Used by npm. | INDIRECT | 1 | |
| npm-bundled • 5.0.0list things in node_modules that are bundledDependencies, or transitive dependencies thereof | INDIRECT | 1 | |
| npm-normalize-package-bin • 5.0.0Turn any flavor of allowable package.json bin into a normalized object | INDIRECT | 0 | |
| npm-package-arg • 13.0.2Parse the things that can be arguments to `npm install` | INDIRECT | 5 | |
| npm-packlist • 10.0.4Get a list of the files to add from a folder into an npm package | INDIRECT | 5 | |
| npm-pick-manifest • 11.0.3Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules. | INDIRECT | 8 | |
| npm-registry-fetch • 19.1.1Fetch-based http client for use with npm registry APIs | INDIRECT | 47 | |
| pacote • 21.5.0JavaScript package downloader | DIRECT | 93 | |
| proc-log • 6.1.0just emit 'log' events on the process object | DIRECT | 0 | |
| semver • 7.7.4The semantic version parser used by npm. | DIRECT | 0 | |
| ssri • 13.0.1Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec. | INDIRECT | 1 | |
| unique-filename • 5.0.0Generate a unique filename for use in temporary directories or caches. | INDIRECT | 2 | |
| unique-slug • 6.0.0Generate a unique character string suitible for use in files and URLs. | INDIRECT | 1 | |
| validate-npm-package-name • 7.0.2Give me a string and I'll tell you if it's a valid npm package name | INDIRECT | 0 | |
| which • 6.0.1Like which(1) unix command. Find the first instance of an executable in the PATH. | INDIRECT | 1 | |
| yallist • 4.0.0Yet Another Linked List | INDIRECT | 0 |
MIT34
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| @gar/promise-retry • 1.0.2Retries a function that returns a promise, leveraging the power of the retry module. | INDIRECT | 1 | |
| @tufjs/canonical-json • 2.0.0OLPC JSON canonicalization | INDIRECT | 0 | |
| @tufjs/models • 4.1.0TUF metadata models | INDIRECT | 4 | |
| agent-base • 7.1.4Turn a function into an `http.Agent` instance | INDIRECT | 0 | |
| balanced-match • 4.0.4Match balanced character pairs, like "{" and "}" | INDIRECT | 0 | |
| brace-expansion • 5.0.4Brace expansion as known from sh/bash | INDIRECT | 1 | |
| debug • 4.4.3Lightweight debugging utility for Node.js and the browser | INDIRECT | 1 | |
| env-paths • 2.2.1Get paths for storing things like data, config, cache, etc | INDIRECT | 0 | |
| err-code • 2.0.3Create an error with a code | INDIRECT | 0 | |
| fdir • 6.5.0The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s | INDIRECT | 0 | |
| http-proxy-agent • 7.0.2An HTTP(s) proxy `http.Agent` implementation for HTTP | INDIRECT | 3 | |
| https-proxy-agent • 7.0.6An HTTP(s) proxy `http.Agent` implementation for HTTPS | INDIRECT | 3 | |
| iconv-lite • 0.7.2Convert character encodings in pure javascript. | INDIRECT | 1 | |
| imurmurhash • 0.1.4An incremental implementation of MurmurHash3 | INDIRECT | 0 | |
| ip-address • 10.1.0A library for parsing IPv4 and IPv6 IP addresses in node and the browser. | INDIRECT | 0 | |
| json-parse-even-better-errors • 5.0.0JSON.parse with context information on error | DIRECT | 0 | |
| jsonparse • 1.3.1This is a pure-js JSON streaming parser for node.js | INDIRECT | 0 | |
| minipass-fetch • 5.0.2An implementation of window.fetch in Node.js using Minipass streams | INDIRECT | 5 | |
| minizlib • 3.1.0A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding. | INDIRECT | 1 | |
| ms • 2.1.3Tiny millisecond conversion utility | INDIRECT | 0 | |
| negotiator • 1.0.0HTTP content negotiation | INDIRECT | 0 | |
| node-gyp • 12.2.0Node.js native addon build tool | INDIRECT | 56 | |
| p-map • 7.0.4Map over promises concurrently | INDIRECT | 0 | |
| picomatch • 4.0.3Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions. | INDIRECT | 0 | |
| promise-retry • 2.0.1Retries a function that returns a promise, leveraging the power of the retry module. | INDIRECT | 2 | |
| retry • 0.12.0Abstraction for exponential and custom retry strategies for failed operations. | INDIRECT | 0 | |
| retry • 0.13.1Abstraction for exponential and custom retry strategies for failed operations. | INDIRECT | 0 | |
| safer-buffer • 2.1.2Modern Buffer API polyfill without footguns | INDIRECT | 0 | |
| smart-buffer • 4.2.0smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more. | INDIRECT | 0 | |
| socks-proxy-agent • 8.0.5A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS | INDIRECT | 6 | |
| socks • 2.8.7Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality. | INDIRECT | 2 | |
| spdx-expression-parse • 4.0.0parse SPDX license expressions | INDIRECT | 2 | |
| tinyglobby • 0.2.15A fast and minimal alternative to globby and fast-glob | INDIRECT | 2 | |
| tuf-js • 4.1.0JavaScript implementation of The Update Framework (TUF) | INDIRECT | 44 |
BlueOak-1.0.09
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| chownr • 3.0.0like `chown -R` | INDIRECT | 0 | |
| glob • 13.0.6the most correct and second fastest glob implementation in JavaScript | INDIRECT | 6 | |
| isexe • 4.0.0Minimal module to check if a file is executable. | INDIRECT | 0 | |
| lru-cache • 11.2.7A cache object that deletes the least-recently-used items. | INDIRECT | 0 | |
| minimatch • 10.2.4a glob matcher in javascript | INDIRECT | 2 | |
| minipass • 7.1.3minimal implementation of a PassThrough stream | INDIRECT | 0 | |
| path-scurry • 2.0.2walk paths fast and efficiently | INDIRECT | 2 | |
| tar • 7.5.11tar for node | INDIRECT | 5 | |
| yallist • 5.0.0Yet Another Linked List | INDIRECT | 0 |
Apache-2.08
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| @sigstore/bundle • 4.0.0Sigstore bundle type | INDIRECT | 1 | |
| @sigstore/core • 3.1.0Base library for Sigstore | INDIRECT | 0 | |
| @sigstore/protobuf-specs • 0.5.0code-signing for npm packages | INDIRECT | 0 | |
| @sigstore/sign • 4.1.0Sigstore signing library | INDIRECT | 48 | |
| @sigstore/tuf • 4.0.1Client for the Sigstore TUF repository | INDIRECT | 46 | |
| @sigstore/verify • 3.1.0Verification of Sigstore signatures | INDIRECT | 3 | |
| exponential-backoff • 3.1.3A utility that allows retrying a function with an exponential delay between attempts. | INDIRECT | 0 | |
| sigstore • 4.1.0code-signing for npm packages | INDIRECT | 54 |
BSD-2-Clause2
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| http-cache-semantics • 4.2.0Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies | INDIRECT | 0 | |
| npm-install-checks • 8.0.0Check the engines and platform fields in package.json | INDIRECT | 1 |
CC-BY-3.01
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| spdx-exceptions • 2.5.0list of SPDX standard license exceptions | INDIRECT | 0 |
CC0-1.01
| Package | Relation | Dependencies | Published |
|---|---|---|---|
| spdx-license-ids • 3.0.23A list of SPDX license identifiers | INDIRECT | 0 |