</>PackageGraphPackageGraph

cacache

npmv21.0.1

Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.

Safe to adopt

Yes — cacache scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 43 days ago. 9 releases in the last 2 years.

  • ?Adoption: grade ?, Not reported by this registry.

    No download data reported for this package yet.

  • AMaintenance: grade A, Excellent.

    Last published 43 days ago. 9 releases in the last 2 years.

  • BWeight: grade B, Good.

    Pulls in 10 transitive packages, about 2.8 MB installed (at least — some of the tree is still being crawled).

  • ASupply chain: grade A, Excellent.

    No install scripts, 4 maintainers, and a contained dependency surface.

  • ALicense: grade A, Excellent.

    ISC — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding cacache to a project.

10
Direct dependencies

Runtime packages this one declares itself.

10
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

2.8 MB
Install size

Unpacked size of this package plus its entire runtime tree.

4
Tree depth

Longest resolved dependency chain below this package.

Part of this dependency tree has not been crawled yet, so these figures are a lower bound rather than a final total.

Licenses in the dependency tree

BlueOak-1.0.0ISCMIT

Every license you inherit by installing cacache, not just its own. Check this before a legal review, not after.

Compatibility

Node.js
node ^22.22.2 || ^24.15.0 || >=26.0.0
Module format
CommonJS only
TypeScript
No bundled types
Install scripts
None

Quick start

A usage example from the cacache README.

javascriptFull README ↗
const cacache = require('cacache')
const fs = require('fs')

const cachePath = '/tmp/my-toy-cache'
const key = 'my-unique-key-1234'

// Cache it! Use `cachePath` as the root of the content cache
cacache.put(cachePath, key, '10293801983029384').then(integrity => {
  console.log(`Saved content to ${cachePath}.`)
})

const destination = '/tmp/mytar.tgz'

// Copy the contents out of the cache and into their destination!
Example truncated — see the full README.

cacache vs the alternatives

Packages solving a similar problem in the npm ecosystem, compared on the signals that drive an adoption decision.

PackageWeekly downloadsDependentsLicenseLast release
cacachethis page01ISC1 month ago
make-fetch-happen43.3M1ISC5 hours ago
ssri01ISC5 hours ago
nocache01MIT5 hours ago
fresh121.2M3MIT5 hours ago
expo-sqlite731.2K1MIT5 hours ago

Dependencies

Declared by cacache v21.0.1. Runtime dependencies are installed with the package; dev dependencies are not.

Runtime (10)

@npmcli/fs ^6.0.0fs-minipass ^3.0.0glob ^13.0.0lru-cache ^11.1.0minipass ^7.0.3minipass-collect ^2.0.1minipass-flush ^1.0.5minipass-pipeline ^1.2.4p-map ^7.0.2ssri ^14.0.0

Dev (3)

@npmcli/eslint-config ^7.0.0@npmcli/template-oss 5.1.0tap ^16.0.0

Used by

Popular packages that depend on cacache.

make-fetch-happennpm

Opinionated, caching, retrying fetch client

↓ 43.3M/wk◈ 1 dependents⚖ ISC

Relationship graph

Dependencies (left) and dependents (right) of cacache.

minipass-pipelineglobssrimake-fetch-happencacache
cacache dependencies dependents

Frequently installed together

negotiatornpm

HTTP content negotiation

↓ 0/wk◈ 1 dependents⚖ MIT
proc-lognpm

just emit 'log' events on the process object

↓ 0/wk◈ 2 dependents⚖ ISC
safe-buffernpm

Safer Node.js Buffer API

↓ 0/wk◈ 3 dependents⚖ MITTS
@npmcli/agentnpm

the http/https agent used by the npm cli

↓ 0/wk◈ 1 dependents⚖ ISC
@npmcli/redactnpm

Redact sensitive npm information from output

↓ 0/wk◈ 1 dependents⚖ ISC
minipass-pipelinenpm

create a pipeline of streams using Minipass

↓ 0/wk◈ 1 dependents⚖ BlueOak-1.0.0TS
http-cache-semanticsnpm

Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies

↓ 0/wk◈ 1 dependents⚖ BSD-2-ClauseTS
minipass-fetchnpm

An implementation of window.fetch in Node.js using Minipass streams

↓ 0/wk◈ 1 dependents⚖ MIT
@gar/promise-retrynpm

Retries a function that returns a promise, leveraging the power of the retry module.

↓ 0/wk◈ 1 dependents⚖ MITTS
ssrinpm

Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.

↓ 0/wk◈ 1 dependents⚖ ISC

Release history

7 releases in the last two years, typically about 38 days apart.

Recent versions of cacache
VersionPublishedSizeLicense
21.0.1latest1 month ago63 KBISC
21.0.02 months ago62 KBISC
20.0.44 months ago62 KBISC
20.0.38 months ago62 KBISC
20.0.28 months ago62 KBISC
20.0.111 months ago62 KBISC
20.0.01 year ago62 KBISC
19.0.11 year ago62 KBISC
19.0.01 year ago62 KBISC
18.0.42 years ago62 KBISC
18.0.32 years ago62 KBISC
18.0.22 years ago62 KBISC
18.0.12 years ago62 KBISC
18.0.02 years ago62 KBISC
17.1.42 years ago62 KBISC

Overview

cacache is an npm package that fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache. It has 1 known dependents in the graph. The latest version is 21.0.1, released under the ISC license.

Who should use it

Teams working in the npm ecosystem who need fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache and value a focused solution.

When not to use it

Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.

Pros

  • Clear open-source license (ISC).

Cons

  • No bundled TypeScript types (may require a separate @types package).

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

npm-cli-opsowlstronautreggisaquibkhan

Keywords

cachecachingcontent-addressabledisk cachedisk storagefile storefilesystemsrisri hashstoragestoresubresource integrity

Frequently asked questions

Should I use cacache?

Yes — cacache scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 43 days ago. 9 releases in the last 2 years.

How do I install cacache?

Run `npm install cacache` to add cacache to your npm project.

How many dependencies does cacache have?

cacache declares 13 direct dependencies and pulls in 10 packages in total once its runtime tree is resolved totalling about 2.8 MB on disk.

What license is cacache released under?

cacache is distributed under the ISC license. Its dependency tree also includes: BlueOak-1.0.0, ISC, MIT.

How popular is cacache?

npm does not publish download counts. Within PackageGraph's crawl, 1 known packages depend on cacache.

Is cacache still maintained?

The most recent release of cacache (v21.0.1) was published 1 month ago.

Does cacache run install scripts?

No. cacache does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.