https://github.com/npm/pacote

npm-cli

Score: 33.42630088421659

Last synced: about 11 hours ago
JSON representation

Repository metadata:

npm fetcher

Host: GitHub
URL: https://github.com/npm/pacote
Owner: npm
License: isc
Created: 2019-06-26T02:09:03.000Z (about 7 years ago)
Default Branch: main
Last Pushed: 2026-07-27T16:40:35.000Z (about 1 month ago)
Last Synced: 2026-09-06T23:06:56.024Z (1 day ago)
Topics: npm-cli
Language: JavaScript
Homepage:
Size: 2.13 MB
Stars: 397
Watchers: 13
Forks: 67
Open Issues: 26
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md

Owner metadata:

Name: npm
Login: npm
Email:
Kind: organization
Description: JavaScript Package Manager, Registry & Website
Website: https://npmjs.com
Location: United States of America
Twitter: npmjs
Company:
Icon url: https://avatars.githubusercontent.com/u/6078720?v=4
Repositories: 343
Last Synced at: 2024-04-14T06:35:40.452Z
Profile URL: https://github.com/npm

GitHub Events

Total

Create event: 36
Delete event: 34
Fork event: 5
Issue comment event: 61
Issues event: 11
Pull request event: 65
Pull request review comment event: 14
Pull request review event: 36
Push event: 122
Release event: 6
Watch event: 26
Total: 416

Last Year

Create event: 21
Delete event: 20
Fork event: 1
Issue comment event: 17
Issues event: 4
Pull request event: 25
Pull request review comment event: 1
Pull request review event: 8
Push event: 56
Release event: 3
Watch event: 3
Total: 159

Committers metadata

Last synced: 1 day ago

Total Commits: 1,198
Total Committers: 62
Avg Commits per committer: 19.323
Development Distribution Score (DDS): 0.524

Commits in past year: 64
Committers in past year: 13
Avg Commits per committer in past year: 4.923
Development Distribution Score (DDS) in past year: 0.594

Name	Email	Commits
Kat Marchán	k**m@s**g	570
isaacs	i**@i**e	215
dependabot[bot]	4****]	99
github-actions[bot]	4****]	66
Gar	g**h@d**r	49
Luke Karrys	l**e@l**m	42
Michael Smith	o**t@g**m	36
nlf	q**k@g**m	15
Ruy Adorno	r**o@h**m	11
reggi	r**i@g**m	10
Rebecca Turner	m**e@r**g	8
Nathan Fritz	f**y@g**m	6
Brian DeHamer	b**r@g**m	6
Philip Harrison	p**p@m**m	4
Audrey Eschright	a**y@n**m	4
Charlotte Spencer	c**r@g**m	3
Marc Bernard	5****s	3
Ajay Kemparaj	a**j@g**m	2
Chris Sidi	h**s@g**m	2
Jack Bates	j**k@n**m	2
Raine Revere	r**e@c**g	2
Thomas GENTILHOMME	g**s@g**m	2
Zach Renner	z**r@m**m	2
Aram Drevekenin	g**r@g**m	1
Andrew	a**g@g**m	1
Andrei Neculau	a**u@g**m	1
Andrei	a**n@g**m	1
Alexsey	a**0@g**m	1
AJ Jordan	a**x@s**t	1
Burke Davison - c13763	B**n@m**m	1
and 32 more...

Issue and Pull Request metadata

Last synced: 1 day ago

Total issues: 25
Total pull requests: 333
Average time to close issues: about 2 months
Average time to close pull requests: 12 days
Total issue authors: 24
Total pull request authors: 30
Average comments per issue: 1.72
Average comments per pull request: 1.11
Merged pull request: 190
Bot issues: 2
Bot pull requests: 221

Past year issues: 5
Past year pull requests: 46
Past year average time to close issues: 12 days
Past year average time to close pull requests: 24 days
Past year issue authors: 5
Past year pull request authors: 14
Past year average comments per issue: 2.4
Past year average comments per pull request: 1.37
Past year merged pull request: 19
Past year bot issues: 0
Past year bot pull requests: 24

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/npm/pacote

Top Issue Authors

dependabot[bot] (2)
ramnathnayak-ibm (1)
wraithgar (1)
aarondill (1)
msqr1 (1)
rakrsh (1)
alphaleadership (1)
rekado (1)
91abhisheksharma-cell (1)
Amndeep7 (1)
babyhuey (1)
pskr (1)
ChewuuHi (1)
igibek (1)
dutchigor (1)

Top Pull Request Authors

dependabot[bot] (169)
github-actions[bot] (52)
wraithgar (22)
owlstronaut (18)
lukekarrys (17)
bdehamer (10)
reggi (6)
mbtools (5)
kchindam-infy (4)
isaacs (4)
feelepxyz (3)
nlf (3)
zkat (2)
milaninfy (2)
oldium (1)

Top Issue Labels

Bug (15)
Needs Triage (14)
Dependencies (2)

Top Pull Request Labels

Dependencies (171)
autorelease: tagged (39)
autorelease: pending (13)
semver:major (1)

Package metadata

Total packages: 4
Total downloads:
- npm: 55,640,309 last-month
Total docker downloads: 12,478,622,296
Total dependent packages: 601 (may contain duplicates)
Total dependent repositories: 722,090 (may contain duplicates)
Total versions: 512
Total maintainers: 3
Total advisories: 1

npmjs.org: pacote

JavaScript package downloader

Homepage: https://github.com/npm/pacote#readme
Licenses: ISC
Latest release: 22.0.0 (published 3 months ago)
Last Synced: 2026-09-06T23:02:12.797Z (1 day ago)
Versions: 238
Dependent Packages: 590
Dependent Repositories: 722,090
Downloads: 55,640,309 Last month
Docker Downloads: 12,478,622,296
Rankings:
- Docker downloads count: 0.003%
- Dependent repos count: 0.043%
- Downloads: 0.049%
- Dependent packages count: 0.103%
- Average: 1.296%
- Stargazers count: 3.413%
- Forks count: 4.164%
Maintainers (3)
Advisories:
- pacote is vulnerable to Denial of Service (DoS) via the addGitSha function

proxy.golang.org: github.com/npm/pacote

Homepage:
Documentation: https://pkg.go.dev/github.com/npm/pacote#section-documentation
Licenses: isc
Latest release: v22.0.0+incompatible (published 3 months ago)
Last Synced: 2026-09-06T23:24:51.842Z (1 day ago)
Versions: 238
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent packages count: 4.894%
- Average: 5.059%
- Dependent repos count: 5.223%

repo1.maven.org: org.webjars.npm:pacote

WebJar for pacote

Homepage: https://www.webjars.org
Documentation: https://appdoc.app/artifact/org.webjars.npm/pacote/
Licenses: ISC
Latest release: 20.0.0 (published over 1 year ago)
Last Synced: 2026-09-06T23:01:05.174Z (1 day ago)
Versions: 21
Dependent Packages: 11
Dependent Repositories: 0
Rankings:
- Dependent packages count: 5.332%
- Stargazers count: 16.206%
- Average: 18.11%
- Forks count: 18.922%
- Dependent repos count: 31.98%

repo1.maven.org: org.mvnpm:pacote

JavaScript package downloader

Homepage: https://github.com/npm/pacote#readme
Documentation: https://appdoc.app/artifact/org.mvnpm/pacote/
Licenses: ISC
Latest release: 22.0.0 (published 3 months ago)
Last Synced: 2026-09-06T23:00:56.446Z (1 day ago)
Versions: 15
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Stargazers count: 19.103%
- Forks count: 24.262%
- Average: 30.279%
- Dependent repos count: 32.002%
- Dependent packages count: 45.751%

Dependencies

package.json npm

@npmcli/eslint-config ^3.0.1 development
@npmcli/template-oss 3.5.0 development
hosted-git-info ^5.0.0 development
mutate-fs ^2.1.1 development
nock ^13.2.4 development
npm-registry-mock ^1.3.2 development
tap ^16.0.1 development
@npmcli/git ^3.0.0
@npmcli/installed-package-contents ^1.0.7
@npmcli/promise-spawn ^3.0.0
@npmcli/run-script ^4.1.0
cacache ^16.0.0
chownr ^2.0.0
fs-minipass ^2.1.0
infer-owner ^1.0.4
minipass ^3.1.6
mkdirp ^1.0.4
npm-package-arg ^9.0.0
npm-packlist ^5.1.0
npm-pick-manifest ^7.0.0
npm-registry-fetch ^13.0.1
proc-log ^2.0.0
promise-retry ^2.0.1
read-package-json ^5.0.0
read-package-json-fast ^2.0.3
rimraf ^3.0.2
ssri ^9.0.0
tar ^6.1.11

test/fixtures/abbrev/package.json npm

tap ^10.1 development

test/fixtures/prepare-script/node_modules/abbrev/package.json npm

tap ^10.1 development

test/fixtures/prepare-script/package-lock.json npm

abbrev 1.1.1 development

test/fixtures/prepare-script/package.json npm

abbrev ^1.1.1 development

.github/workflows/audit.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/ci-release.yml actions

LouisBrunner/checks-action v1.3.1 composite
actions/checkout v3 composite
actions/github-script v6 composite
actions/setup-node v3 composite

.github/workflows/ci.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/codeql-analysis.yml actions

actions/checkout v3 composite
github/codeql-action/analyze v2 composite
github/codeql-action/init v2 composite

.github/workflows/post-dependabot.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite
dependabot/fetch-metadata v1 composite

.github/workflows/pull-request.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/release.yml actions

LouisBrunner/checks-action v1.3.1 composite
actions/checkout v3 composite
actions/github-script v6 composite
actions/setup-node v3 composite

test/fixtures/bin-good/package.json npm

test/fixtures/bin-missing/package.json npm

test/fixtures/bin-object/package.json npm

test/fixtures/bin-string/package.json npm

test/fixtures/prepare-requires-gitignore/package.json npm

.github/actions/install-latest-npm/action.yml actions

.github/actions/create-check/action.yml actions

LouisBrunner/checks-action v1.6.0 composite
actions/github-script v7 composite

.github/workflows/release-integration.yml actions

actions/checkout v6 composite
actions/setup-node v6 composite

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Summary