@node-red/runtime 4.1.14
@node-red/runtime ====================
@node-red/runtime@4.1.14 was published on 2026-09-01. Its manifest declares 11 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.
All @node-red/runtime versions · Permanent reference to 4.1.14 · Latest release
Package specifications
| Version | 4.1.14 |
|---|---|
| License declaration | Apache-2.0 |
| Published | 2026-09-01T12:53:58.045Z |
| Node.js requirement | Not declared |
| Type declarations | Not declared |
| Runtime dependency count | 11 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 632.97 KiB |
| Published file count | 62 |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | ./lib/index.js |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 323 |
| Repository stars | 23787 |
| Repository forks | 3969 |
Install @node-red/runtime 4.1.14
npm install @node-red/runtime@4.1.14 pnpm add @node-red/runtime@4.1.14 yarn add @node-red/runtime@4.1.14
Runtime dependencies
- got 12.6.1
- rfdc 1.4.1
- clone 2.1.2
- semver 7.8.5
- express 4.22.2
- cronosjs 1.7.1
- fs-extra 11.4.0
- async-mutex 0.5.0
- @node-red/util 4.1.14
- @node-red/registry 4.1.14
- json-stringify-safe 5.0.1
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- @babel/runtime@7.29.10 — indirect
- @isaacs/fs-minipass@4.0.1 — indirect
- @node-red/registry@4.1.14 — direct
- @node-red/util@4.1.14 — direct
- @sindresorhus/is@5.6.0 — indirect
- @szmarczak/http-timer@5.0.1 — indirect
- @types/http-cache-semantics@4.2.0 — indirect
- accepts@1.3.8 — indirect
- ansi-styles@4.3.0 — indirect
- array-flatten@1.1.1 — indirect
- async-function@1.0.0 — indirect
- async-generator-function@1.0.0 — indirect
- async-mutex@0.5.0 — direct
- body-parser@1.20.9 — indirect
- bytes@3.1.2 — indirect
- cacheable-lookup@7.0.0 — indirect
- cacheable-request@10.2.14 — indirect
- call-bind-apply-helpers@1.0.2 — indirect
- call-bound@1.0.4 — indirect
- chalk@4.1.2 — indirect
- chownr@3.0.0 — indirect
- clone@2.1.2 — direct
- color-convert@2.0.1 — indirect
- color-name@1.1.4 — indirect
- content-disposition@0.5.4 — indirect
- content-type@1.0.5 — indirect
- cookie@0.7.2 — indirect
- cookie-signature@1.0.7 — indirect
- cronosjs@1.7.1 — direct
- debug@2.6.9 — indirect
- decompress-response@6.0.0 — indirect
- defer-to-connect@2.0.1 — indirect
- depd@2.0.0 — indirect
- destroy@1.2.0 — indirect
- dunder-proto@1.0.1 — indirect
- ee-first@1.1.1 — indirect
- encodeurl@2.0.0 — indirect
- es-define-property@1.0.1 — indirect
- es-errors@1.3.0 — indirect
- es-object-atoms@1.1.2 — indirect
- escape-html@1.0.3 — indirect
- etag@1.8.1 — indirect
- express@4.22.2 — direct
- finalhandler@1.3.2 — indirect
- form-data-encoder@2.1.4 — indirect
- forwarded@0.2.0 — indirect
- fresh@0.5.2 — indirect
- fs-extra@11.4.0 — direct
- function-bind@1.1.2 — indirect
- generator-function@2.0.1 — indirect
- get-intrinsic@1.3.1 — indirect
- get-proto@1.0.1 — indirect
- get-stream@6.0.1 — indirect
- gopd@1.2.0 — indirect
- got@12.6.1 — direct
- graceful-fs@4.2.11 — indirect
- has-flag@4.0.0 — indirect
- has-symbols@1.1.0 — indirect
- hasown@2.0.4 — indirect
- http-cache-semantics@4.3.0 — indirect
- http-errors@2.0.1 — indirect
- http2-wrapper@2.2.1 — indirect
- i18next@25.8.14 — indirect
- iconv-lite@0.4.24 — indirect
- inherits@2.0.4 — indirect
- ipaddr.js@1.9.1 — indirect
- json-buffer@3.0.1 — indirect
- json-stringify-safe@5.0.1 — direct
- jsonata@2.2.2 — indirect
- jsonfile@6.2.1 — indirect
- keyv@4.5.4 — indirect
- lodash.clonedeep@4.5.0 — indirect
- lowercase-keys@3.0.0 — indirect
- math-intrinsics@1.1.0 — indirect
- media-typer@0.3.0 — indirect
- merge-descriptors@1.0.3 — indirect
- methods@1.1.2 — indirect
- mime@1.6.0 — indirect
- mime-db@1.52.0 — indirect
- mime-types@2.1.35 — indirect
- mimic-response@3.1.0 — indirect
- mimic-response@4.0.0 — indirect
- minipass@7.1.3 — indirect
- minizlib@3.1.0 — indirect
- moment@2.30.1 — indirect
- moment-timezone@0.5.48 — indirect
- ms@2.0.0 — indirect
- ms@2.1.3 — indirect
- negotiator@0.6.3 — indirect
- normalize-url@8.1.1 — indirect
- npm@10.9.9 — indirect
- npm>10.9.9>@isaacs/cliui@8.0.2 — indirect
- npm>10.9.9>@isaacs/cliui>ansi-regex@6.2.2 — indirect
- npm>10.9.9>@isaacs/cliui>emoji-regex@9.2.2 — indirect
- npm>10.9.9>@isaacs/cliui>string-width@5.1.2 — indirect
- npm>10.9.9>@isaacs/cliui>strip-ansi@7.2.0 — indirect
- npm>10.9.9>@isaacs/fs-minipass@4.0.1 — indirect
- npm>10.9.9>@isaacs/string-locale-compare@1.1.0 — indirect
- npm>10.9.9>@npmcli/agent@3.0.0 — indirect
- npm>10.9.9>@npmcli/arborist@8.0.5 — indirect
- npm>10.9.9>@npmcli/config@9.0.0 — indirect
- npm>10.9.9>@npmcli/fs@4.0.0 — indirect
- npm>10.9.9>@npmcli/git@6.0.3 — indirect
- npm>10.9.9>@npmcli/installed-package-contents@3.0.0 — indirect
- npm>10.9.9>@npmcli/map-workspaces@4.0.2 — indirect
- npm>10.9.9>@npmcli/metavuln-calculator@8.0.1 — indirect
- npm>10.9.9>@npmcli/metavuln-calculator>pacote@20.0.1 — indirect
- npm>10.9.9>@npmcli/name-from-folder@3.0.0 — indirect
- npm>10.9.9>@npmcli/node-gyp@4.0.0 — indirect
- npm>10.9.9>@npmcli/package-json@6.2.0 — indirect
- npm>10.9.9>@npmcli/promise-spawn@8.0.3 — indirect
- npm>10.9.9>@npmcli/query@4.0.1 — indirect
- npm>10.9.9>@npmcli/redact@3.2.2 — indirect
- npm>10.9.9>@npmcli/run-script@9.1.0 — indirect
- npm>10.9.9>@pkgjs/parseargs@0.11.0 — indirect
- npm>10.9.9>@sigstore/bundle@3.1.0 — indirect
- npm>10.9.9>@sigstore/core@2.0.0 — indirect
- npm>10.9.9>@sigstore/protobuf-specs@0.4.3 — indirect
- npm>10.9.9>@sigstore/sign@3.1.0 — indirect
- npm>10.9.9>@sigstore/tuf@3.1.1 — indirect
- npm>10.9.9>@sigstore/verify@2.1.1 — indirect
- npm>10.9.9>@tufjs/canonical-json@2.0.0 — indirect
- npm>10.9.9>abbrev@3.0.1 — indirect
- npm>10.9.9>agent-base@7.1.4 — indirect
- npm>10.9.9>ansi-regex@5.0.1 — indirect
- npm>10.9.9>ansi-styles@6.2.3 — indirect
- npm>10.9.9>aproba@2.1.0 — indirect
- npm>10.9.9>archy@1.0.0 — indirect
- npm>10.9.9>balanced-match@1.0.2 — indirect
- npm>10.9.9>bin-links@5.0.0 — indirect
- npm>10.9.9>binary-extensions@2.3.0 — indirect
- npm>10.9.9>brace-expansion@2.0.2 — indirect
- npm>10.9.9>cacache@19.0.1 — indirect
- npm>10.9.9>chalk@5.6.2 — indirect
- npm>10.9.9>chownr@3.0.0 — indirect
- npm>10.9.9>ci-info@4.4.0 — indirect
- npm>10.9.9>cidr-regex@4.1.3 — indirect
- npm>10.9.9>cli-columns@4.0.0 — indirect
- npm>10.9.9>cmd-shim@7.0.0 — indirect
- npm>10.9.9>color-convert@2.0.1 — indirect
- npm>10.9.9>color-name@1.1.4 — indirect
- npm>10.9.9>common-ancestor-path@1.0.1 — indirect
- npm>10.9.9>cross-spawn@7.0.6 — indirect
- npm>10.9.9>cross-spawn>which@2.0.2 — indirect
- npm>10.9.9>cssesc@3.0.0 — indirect
- npm>10.9.9>debug@4.4.3 — indirect
- npm>10.9.9>diff@5.2.2 — indirect
- npm>10.9.9>eastasianwidth@0.2.0 — indirect
- npm>10.9.9>emoji-regex@8.0.0 — indirect
- npm>10.9.9>encoding@0.1.13 — indirect
- npm>10.9.9>env-paths@2.2.1 — indirect
- npm>10.9.9>err-code@2.0.3 — indirect
- npm>10.9.9>exponential-backoff@3.1.3 — indirect
- npm>10.9.9>fastest-levenshtein@1.0.16 — indirect
- npm>10.9.9>fdir@6.5.0 — indirect
- npm>10.9.9>foreground-child@3.3.1 — indirect
- npm>10.9.9>fs-minipass@3.0.3 — indirect
- npm>10.9.9>glob@10.5.0 — indirect
- npm>10.9.9>graceful-fs@4.2.11 — indirect
- npm>10.9.9>hosted-git-info@8.1.0 — indirect
- npm>10.9.9>http-cache-semantics@4.2.0 — indirect
- npm>10.9.9>http-proxy-agent@7.0.2 — indirect
- npm>10.9.9>https-proxy-agent@7.0.6 — indirect
- npm>10.9.9>iconv-lite@0.6.3 — indirect
- npm>10.9.9>ignore-walk@7.0.0 — indirect
- npm>10.9.9>imurmurhash@0.1.4 — indirect
- npm>10.9.9>ini@5.0.0 — indirect
- npm>10.9.9>init-package-json@7.0.2 — indirect
- npm>10.9.9>ip-address@10.1.0 — indirect
- npm>10.9.9>ip-regex@5.0.0 — indirect
- npm>10.9.9>is-cidr@5.1.1 — indirect
- npm>10.9.9>is-fullwidth-code-point@3.0.0 — indirect
- npm>10.9.9>isexe@2.0.0 — indirect
- npm>10.9.9>jackspeak@3.4.3 — indirect
- npm>10.9.9>json-parse-even-better-errors@4.0.0 — indirect
- npm>10.9.9>json-stringify-nice@1.1.4 — indirect
- npm>10.9.9>jsonparse@1.3.1 — indirect
- npm>10.9.9>just-diff@6.0.2 — indirect
- npm>10.9.9>just-diff-apply@5.5.0 — indirect
- npm>10.9.9>libnpmaccess@9.0.0 — indirect
- npm>10.9.9>libnpmdiff@7.0.5 — indirect
- npm>10.9.9>libnpmexec@9.0.5 — indirect
- npm>10.9.9>libnpmfund@6.0.5 — indirect
- npm>10.9.9>libnpmhook@11.0.0 — indirect
- npm>10.9.9>libnpmorg@7.0.0 — indirect
- npm>10.9.9>libnpmpack@8.0.5 — indirect
- npm>10.9.9>libnpmpublish@10.0.2 — indirect
- npm>10.9.9>libnpmsearch@8.0.0 — indirect
- npm>10.9.9>libnpmteam@7.0.0 — indirect
- npm>10.9.9>libnpmversion@7.0.0 — indirect
- npm>10.9.9>lru-cache@10.4.3 — indirect
- npm>10.9.9>make-fetch-happen@14.0.3 — indirect
- npm>10.9.9>minimatch@9.0.9 — indirect
- npm>10.9.9>minipass@7.1.3 — indirect
- npm>10.9.9>minipass-collect@2.0.1 — indirect
- npm>10.9.9>minipass-fetch@4.0.1 — indirect
- npm>10.9.9>minipass-flush@1.0.5 — indirect
- npm>10.9.9>minipass-flush>minipass@3.3.6 — indirect
- npm>10.9.9>minipass-flush>yallist@4.0.0 — indirect
- npm>10.9.9>minipass-pipeline@1.2.4 — indirect
- npm>10.9.9>minipass-pipeline>minipass@3.3.6 — indirect
- npm>10.9.9>minipass-pipeline>yallist@4.0.0 — indirect
- npm>10.9.9>minipass-sized@1.0.3 — indirect
- npm>10.9.9>minipass-sized>minipass@3.3.6 — indirect
- npm>10.9.9>minipass-sized>yallist@4.0.0 — indirect
- npm>10.9.9>minizlib@3.1.0 — indirect
- npm>10.9.9>ms@2.1.3 — indirect
- npm>10.9.9>mute-stream@2.0.0 — indirect
- npm>10.9.9>negotiator@1.0.0 — indirect
- npm>10.9.9>node-gyp@11.5.0 — indirect
- npm>10.9.9>nopt@8.1.0 — indirect
- npm>10.9.9>normalize-package-data@7.0.1 — indirect
- npm>10.9.9>npm-audit-report@6.0.0 — indirect
- npm>10.9.9>npm-bundled@4.0.0 — indirect
- npm>10.9.9>npm-install-checks@7.1.2 — indirect
- npm>10.9.9>npm-normalize-package-bin@4.0.0 — indirect
- npm>10.9.9>npm-package-arg@12.0.2 — indirect
- npm>10.9.9>npm-packlist@9.0.0 — indirect
- npm>10.9.9>npm-pick-manifest@10.0.0 — indirect
- npm>10.9.9>npm-profile@11.0.1 — indirect
- npm>10.9.9>npm-registry-fetch@18.0.2 — indirect
- npm>10.9.9>npm-user-validate@3.0.0 — indirect
- npm>10.9.9>p-map@7.0.4 — indirect
- npm>10.9.9>package-json-from-dist@1.0.1 — indirect
- npm>10.9.9>pacote@19.0.2 — indirect
- npm>10.9.9>parse-conflict-json@4.0.0 — indirect
- npm>10.9.9>path-key@3.1.1 — indirect
- npm>10.9.9>path-scurry@1.11.1 — indirect
- npm>10.9.9>picomatch@4.0.3 — indirect
- npm>10.9.9>postcss-selector-parser@7.1.1 — indirect
- npm>10.9.9>proc-log@5.0.0 — indirect
- npm>10.9.9>proggy@3.0.0 — indirect
- npm>10.9.9>promise-all-reject-late@1.0.1 — indirect
- npm>10.9.9>promise-call-limit@3.0.2 — indirect
- npm>10.9.9>promise-retry@2.0.1 — indirect
- npm>10.9.9>promzard@2.0.0 — indirect
- npm>10.9.9>qrcode-terminal@0.12.0 — indirect
- npm>10.9.9>read@4.1.0 — indirect
- npm>10.9.9>read-cmd-shim@5.0.0 — indirect
- npm>10.9.9>read-package-json-fast@4.0.0 — indirect
- npm>10.9.9>retry@0.12.0 — indirect
- npm>10.9.9>safer-buffer@2.1.2 — indirect
- npm>10.9.9>semver@7.7.4 — indirect
- npm>10.9.9>shebang-command@2.0.0 — indirect
- npm>10.9.9>shebang-regex@3.0.0 — indirect
- npm>10.9.9>signal-exit@4.1.0 — indirect
- npm>10.9.9>sigstore@3.1.0 — indirect
- npm>10.9.9>smart-buffer@4.2.0 — indirect
- npm>10.9.9>socks@2.8.7 — indirect
- npm>10.9.9>socks-proxy-agent@8.0.5 — indirect
- npm>10.9.9>spdx-correct@3.2.0 — indirect
- npm>10.9.9>spdx-correct>spdx-expression-parse@3.0.1 — indirect
- npm>10.9.9>spdx-exceptions@2.5.0 — indirect
- npm>10.9.9>spdx-expression-parse@4.0.0 — indirect
- npm>10.9.9>spdx-license-ids@3.0.23 — indirect
- npm>10.9.9>ssri@12.0.0 — indirect
- npm>10.9.9>string-width@4.2.3 — indirect
- npm>10.9.9>string-width-cjs@4.2.3 — indirect
- npm>10.9.9>strip-ansi@6.0.1 — indirect
- npm>10.9.9>strip-ansi-cjs@6.0.1 — indirect
- npm>10.9.9>supports-color@9.4.0 — indirect
- npm>10.9.9>tar@7.5.22 — indirect
- npm>10.9.9>text-table@0.2.0 — indirect
- npm>10.9.9>tiny-relative-date@1.3.0 — indirect
- npm>10.9.9>tinyglobby@0.2.15 — indirect
- npm>10.9.9>treeverse@3.0.0 — indirect
- npm>10.9.9>tuf-js@3.1.0 — indirect
- npm>10.9.9>tuf-js>@tufjs/models@3.0.1 — indirect
- npm>10.9.9>unique-filename@4.0.0 — indirect
- npm>10.9.9>unique-slug@5.0.0 — indirect
- npm>10.9.9>util-deprecate@1.0.2 — indirect
- npm>10.9.9>validate-npm-package-license@3.0.4 — indirect
- npm>10.9.9>validate-npm-package-license>spdx-expression-parse@3.0.1 — indirect
- npm>10.9.9>validate-npm-package-name@6.0.2 — indirect
- npm>10.9.9>walk-up-path@3.0.1 — indirect
- npm>10.9.9>which@5.0.0 — indirect
- npm>10.9.9>which>isexe@3.1.5 — indirect
- npm>10.9.9>wrap-ansi@8.1.0 — indirect
- npm>10.9.9>wrap-ansi-cjs@7.0.0 — indirect
- npm>10.9.9>wrap-ansi-cjs>ansi-styles@4.3.0 — indirect
- npm>10.9.9>wrap-ansi>ansi-regex@6.2.2 — indirect
- npm>10.9.9>wrap-ansi>emoji-regex@9.2.2 — indirect
- npm>10.9.9>wrap-ansi>string-width@5.1.2 — indirect
- npm>10.9.9>wrap-ansi>strip-ansi@7.2.0 — indirect
- npm>10.9.9>write-file-atomic@6.0.0 — indirect
- npm>10.9.9>yallist@5.0.0 — indirect
- object-inspect@1.13.4 — indirect
- on-finished@2.4.2 — indirect
- p-cancelable@3.0.0 — indirect
- parseurl@1.3.3 — indirect
- path-to-regexp@0.1.13 — indirect
- proxy-addr@2.0.8 — indirect
- qs@6.15.4 — indirect
- qs@6.16.2 — indirect
- quick-lru@5.1.1 — indirect
- range-parser@1.2.1 — indirect
- raw-body@2.5.3 — indirect
- resolve-alpn@1.2.1 — indirect
- responselike@3.0.0 — indirect
- rfdc@1.4.1 — direct
- safe-buffer@5.2.1 — indirect
- safer-buffer@2.1.2 — indirect
- semver@7.8.5 — direct
- send@0.19.2 — indirect
- serve-static@1.16.3 — indirect
- setprototypeof@1.2.0 — indirect
- side-channel@1.1.1 — indirect
- side-channel-list@1.0.1 — indirect
- side-channel-map@1.0.1 — indirect
- side-channel-weakmap@1.0.2 — indirect
- statuses@2.0.2 — indirect
- supports-color@7.2.0 — indirect
- tar@7.5.22 — indirect
- toidentifier@1.0.1 — indirect
- tslib@2.8.1 — indirect
- type-is@1.6.18 — indirect
- uglify-js@3.19.3 — indirect
- universalify@2.0.1 — indirect
- unpipe@1.0.0 — indirect
- utils-merge@1.0.1 — indirect
- validate-npm-package-name@7.0.2 — indirect
- vary@1.1.2 — indirect
- yallist@5.0.0 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Maintained | 10/10 — 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 |
|---|---|
| Code-Review | 4/10 — Found 5/12 approved changesets -- score normalized to 4 |
| Security-Policy | 10/10 — security policy file detected |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| Token-Permissions | 10/10 — GitHub workflow tokens follow principle of least privilege |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| License | 10/10 — license file detected |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Pinned-Dependencies | 2/10 — dependency not pinned by hash detected -- score normalized to 2 |
| Signed-Releases | 0/10 — Project has not signed or included provenance with any releases. |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
| Fuzzing | 0/10 — project is not fuzzed |
Evidence and freshness
- https://registry.npmjs.org/%40node-red%2Fruntime/4.1.14 — retrieved 2026-10-29T11:09:38.584Z
- https://api.deps.dev/v3/projects/github.com%2Fnode-red%2Fnode-red — retrieved 2026-10-29T05:10:21.183Z
- https://api.deps.dev/v3/systems/npm/packages/%40node-red%2Fruntime/versions/4.1.14 — retrieved 2026-10-29T11:09:39.105Z
- https://api.deps.dev/v3/systems/npm/packages/%40node-red%2Fruntime/versions/4.1.14:dependencies — retrieved 2026-10-29T11:09:39.155Z