npmpackage.info

Gathering detailed insights and metrics for minimist

Other packages similar to minimist

minimist-options

4.1.0

Pretty options for minimist

@types/minimist

1.2.5

TypeScript definitions for minimist

has-flag

5.0.1

Check if argv has a specific flag

dargs

8.1.0

Reverse minimist. Convert an object of options into an array of command-line arguments.

Gathering detailed insights and metrics for minimist

minimist - 1.2.8 | npmpackage.info

minimist

parse argument options

1.2.8

619

MIT

JavaScript

53.20 kB

Installations

npm install minimist

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

19.6.0

NPM Version

9.4.0 Pull Requests

Open

3

Total

28

Closed

10

Merged

15

Issues

Open

11

Total

52

Closed

41

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

minimistjs

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

619 Stars

168 Commits

38 Forks

6 Watchers

2 Branches

18 Contributors

Updated on Jul 11, 2025

Sponsor this package

https://github.com/sponsors/ljharb

Maintainers

View All 18 Contributors

Package Meta Information

Latest Version

1.2.8

Package Id

minimist@1.2.8

Unpacked Size

53.20 kB

Size

15.16 kB

File Count

NPM Version

9.4.0

Node Version

19.6.0

Published on

Feb 09, 2023

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

@ljharb/eslint-config aud auto-changelog eslint in-publish npmignore nyc safe-publish-latest tape

minimist

parse argument options

This module is the guts of optimist's argument parser without all the fanciful decoration.

example

1var argv = require('minimist')(process.argv.slice(2));
2console.log(argv);

$ node example/parse.js -a beep -b boop
{ _: [], a: 'beep', b: 'boop' }

$ node example/parse.js -x 3 -y 4 -n5 -abc --beep=boop foo bar baz
{
	_: ['foo', 'bar', 'baz'],
	x: 3,
	y: 4,
	n: 5,
	a: true,
	b: true,
	c: true,
	beep: 'boop'
}

security

Previous versions had a prototype pollution bug that could cause privilege escalation in some circumstances when handling untrusted user input.

Please use version 1.2.6 or later:

https://security.snyk.io/vuln/SNYK-JS-MINIMIST-2429795 (version <=1.2.5)
https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 (version <=1.2.3)

methods

1var parseArgs = require('minimist')

var argv = parseArgs(args, opts={})

Return an argument object argv populated with the array arguments from args.

argv._ contains all the arguments that didn't have an option associated with them.

Numeric-looking arguments will be returned as numbers unless opts.string or opts.boolean is set for that argument name.

Any arguments after '--' will not be parsed and will end up in argv._.

options can be:

opts.string - a string or array of strings argument names to always treat as strings
opts.boolean - a boolean, string or array of strings to always treat as booleans. if true will treat all double hyphenated arguments without equal signs as boolean (e.g. affects --foo, not -f or --foo=bar)
opts.alias - an object mapping string names to strings or arrays of string argument names to use as aliases
opts.default - an object mapping string argument names to default values
opts.stopEarly - when true, populate argv._ with everything after the first non-option
opts['--'] - when true, populate argv._ with everything before the -- and argv['--'] with everything after the --. Here's an example:
```
> require('./')('one two three -- four five --six'.split(' '), { '--': true })
{
  _: ['one', 'two', 'three'],
  '--': ['four', 'five', '--six']
}
```
Note that with opts['--'] set, parsing for arguments still stops after the --.
opts.unknown - a function which is invoked with a command line parameter not defined in the opts configuration object. If the function returns false, the unknown option is not added to argv.

install

With npm do:

npm install minimist

license

MIT

Critical

9.8/10

Summary

Prototype Pollution in minimist

Affected Versions

< 0.2.4

Patched Versions

0.2.4

Critical

9.8/10

Summary

Prototype Pollution in minimist

Affected Versions

>= 1.0.0, < 1.2.6

Patched Versions

1.2.6

Moderate

5.6/10

Summary

Prototype Pollution in minimist

Affected Versions

>= 1.0.0, < 1.2.3

Patched Versions

1.2.3

Moderate

5.6/10

Summary

Prototype Pollution in minimist

Affected Versions

< 0.2.1

Patched Versions

0.2.1

Moderate

0/10

Summary

Withdrawn: ESLint dependencies are vulnerable (ReDoS and Prototype Pollution)

Affected Versions

< 1.2.2

Patched Versions

1.2.2

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

10

License

Determines if the project has defined a license.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

Security-Policy

Determines if the project has published a security policy.

4

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

1

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

6

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More