@nuxt/nitro-server 4.4.4

Nitro server integration for Nuxt

@nuxt/nitro-server@4.4.4 was published on 2026-04-29. Its manifest declares 28 runtime dependencies and 3 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is ^20.19.0 || >=22.12.0.

All @nuxt/nitro-server versions · Permanent reference to 4.4.4 · Latest release

Package specifications

Version	4.4.4
License declaration	MIT
Published	2026-04-29T23:46:52.098Z
Node.js requirement	^20.19.0 \|\| >=22.12.0
Type declarations	Bundled declarations
Runtime dependency count	28
Peer requirement count	3
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	131.59 KiB
Published file count	43
Package type	module
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	3
Resolved graph dependencies	427
Repository stars	60985
Repository forks	5804

Install @nuxt/nitro-server 4.4.4

npm install @nuxt/nitro-server@4.4.4
pnpm add @nuxt/nitro-server@4.4.4
yarn add @nuxt/nitro-server@4.4.4

Runtime dependencies

h3 ^1.15.11
ufo ^1.6.4
vue ^3.5.33
defu ^6.1.7
errx ^0.1.0
nypm ^0.6.6
rou3 ^0.8.1
destr ^2.0.5
klona ^2.0.6
ohash ^2.0.11
pathe ^2.0.3
unctx ^2.5.0
consola ^3.4.2
devalue ^5.7.1
exsolve ^1.0.8
impound ^1.1.5
std-env ^4.1.0
@nuxt/kit 4.4.4
nitropack ^2.13.4
unstorage ^1.17.5
@unhead/vue ^2.1.13
@vue/shared ^3.5.33
@nuxt/devalue ^2.0.2
mocked-exports ^0.1.1
vue-devtools-stub ^0.1.0
vue-bundle-renderer ^2.2.0
escape-string-regexp ^5.0.0
@babel/plugin-syntax-typescript ^7.28.6

Peer requirements

nuxt ^4.4.4
@rollup/plugin-babel ^6.0.0 || ^7.0.0 (optional peer)
@babel/plugin-proposal-decorators ^7.25.0 (optional peer)

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@babel/plugin-syntax-typescript@7.29.7 — direct
@nuxt/devalue@2.0.2 — direct
@nuxt/kit@4.4.4 — direct
@unhead/vue@2.1.17 — direct
@vue/shared@3.5.44 — direct
consola@3.4.2 — direct
defu@6.1.7 — direct
destr@2.0.5 — direct
devalue@5.9.4 — direct
errx@0.1.2 — direct
escape-string-regexp@5.0.0 — direct
exsolve@1.2.0 — direct
h3@1.15.11 — direct
impound@1.2.1 — direct
klona@2.0.6 — direct
mocked-exports@0.1.1 — direct
nitropack@2.13.5 — direct
nypm@0.6.12 — direct
ohash@2.0.12 — direct
pathe@2.0.3 — direct
rou3@0.8.1 — direct
std-env@4.3.0 — direct
ufo@1.6.4 — direct
unctx@2.5.0 — direct
unstorage@1.17.6 — direct
vue@3.5.44 — direct
vue-bundle-renderer@2.4.0 — direct
vue-devtools-stub@0.1.0 — direct
@babel/helper-plugin-utils@7.29.7 — indirect
c12@3.3.4 — indirect
ignore@7.0.14 — indirect
jiti@2.7.0 — indirect
mlly@1.8.2 — indirect
pkg-types@2.4.0 — indirect
rc9@3.1.0 — indirect
scule@1.3.0 — indirect
semver@7.8.5 — indirect
tinyglobby@0.2.17 — indirect
untyped@2.0.0 — indirect
hookable@6.1.2 — indirect
unhead@2.1.17 — indirect
cookie-es@1.2.3 — indirect
crossws@0.3.5 — indirect
iron-webcrypto@1.2.1 — indirect
node-mock-http@1.0.5 — indirect
radix3@1.1.2 — indirect
uncrypto@0.1.3 — indirect
@jridgewell/trace-mapping@0.3.31 — indirect
es-module-lexer@3.0.4 — indirect
unplugin@3.6.0 — indirect
unplugin-utils@0.3.2 — indirect
@cloudflare/kv-asset-handler@0.4.2 — indirect
@rollup/plugin-alias@6.0.1 — indirect
@rollup/plugin-commonjs@29.0.3 — indirect
@rollup/plugin-inject@5.0.5 — indirect
@rollup/plugin-json@6.1.0 — indirect
@rollup/plugin-node-resolve@16.0.3 — indirect
@rollup/plugin-replace@6.0.3 — indirect
@rollup/plugin-terser@1.0.2 — indirect
@vercel/nft@1.11.0 — indirect
archiver@7.0.1 — indirect
chokidar@5.0.0 — indirect
citty@0.2.2 — indirect
compatx@0.2.0 — indirect
confbox@0.2.4 — indirect
cookie-es@2.0.1 — indirect
croner@10.0.1 — indirect
db0@0.3.4 — indirect
dot-prop@10.2.0 — indirect
esbuild@0.28.2 — indirect
etag@1.8.1 — indirect
globby@16.2.4 — indirect
gzip-size@7.0.0 — indirect
hookable@5.5.3 — indirect
httpxy@0.5.6 — indirect
ioredis@5.11.1 — indirect
knitwork@1.3.0 — indirect
listhen@1.10.1 — indirect
magic-string@0.30.21 — indirect
magicast@0.5.5 — indirect
mime@4.1.2 — indirect
node-fetch-native@1.6.7 — indirect
ofetch@1.5.1 — indirect
perfect-debounce@2.1.0 — indirect
pretty-bytes@7.2.0 — indirect
rollup@4.65.1 — indirect
rollup-plugin-visualizer@7.1.1 — indirect
serve-placeholder@2.0.2 — indirect
serve-static@2.2.1 — indirect
source-map@0.7.6 — indirect
ultrahtml@1.7.0 — indirect
unenv@2.0.0-rc.24 — indirect
unimport@6.5.0 — indirect
unwasm@0.5.3 — indirect
youch@4.1.1 — indirect
youch-core@0.3.3 — indirect
citty@0.2.2 — indirect
tinyexec@1.3.1 — indirect
acorn@8.19.0 — indirect
estree-walker@3.0.3 — indirect
unplugin@2.3.11 — indirect
anymatch@3.1.3 — indirect
lru-cache@11.5.3 — indirect
@vue/compiler-dom@3.5.44 — indirect
@vue/compiler-sfc@3.5.44 — indirect
@vue/runtime-dom@3.5.44 — indirect
@vue/server-renderer@3.5.44 — indirect
dotenv@17.4.2 — indirect
giget@3.3.1 — indirect
pkg-types@1.3.1 — indirect
confbox@0.3.1 — indirect
fdir@6.5.0 — indirect
picomatch@4.0.7 — indirect
citty@0.1.6 — indirect
@jridgewell/resolve-uri@3.1.2 — indirect
@jridgewell/sourcemap-codec@1.6.0 — indirect
@jridgewell/remapping@2.3.5 — indirect
webpack-virtual-modules@0.6.2 — indirect
@rollup/pluginutils@5.5.1 — indirect
commondir@1.0.1 — indirect
estree-walker@2.0.2 — indirect
is-reference@1.2.1 — indirect
estree-walker@2.0.2 — indirect
@types/resolve@1.20.2 — indirect
deepmerge@4.3.1 — indirect
is-module@1.0.0 — indirect
resolve@1.22.13 — indirect
serialize-javascript@7.1.4 — indirect
smob@1.6.2 — indirect
terser@5.51.2 — indirect
@mapbox/node-pre-gyp@2.0.3 — indirect
acorn-import-attributes@1.9.5 — indirect
async-sema@3.1.1 — indirect
bindings@1.5.0 — indirect
estree-walker@2.0.2 — indirect
glob@13.0.6 — indirect
graceful-fs@4.2.11 — indirect
node-gyp-build@4.8.4 — indirect
resolve-from@5.0.0 — indirect
archiver-utils@5.0.2 — indirect
async@3.2.6 — indirect
buffer-crc32@1.0.0 — indirect
readable-stream@4.8.0 — indirect
readdir-glob@1.1.3 — indirect
tar-stream@3.2.2 — indirect
zip-stream@6.0.1 — indirect
readdirp@5.1.1 — indirect
type-fest@5.10.0 — indirect
@esbuild/aix-ppc64@0.28.2 — indirect
@esbuild/android-arm@0.28.2 — indirect
@esbuild/android-arm64@0.28.2 — indirect
@esbuild/android-x64@0.28.2 — indirect
@esbuild/darwin-arm64@0.28.2 — indirect
@esbuild/darwin-x64@0.28.2 — indirect
@esbuild/freebsd-arm64@0.28.2 — indirect
@esbuild/freebsd-x64@0.28.2 — indirect
@esbuild/linux-arm@0.28.2 — indirect
@esbuild/linux-arm64@0.28.2 — indirect
@esbuild/linux-ia32@0.28.2 — indirect
@esbuild/linux-loong64@0.28.2 — indirect
@esbuild/linux-mips64el@0.28.2 — indirect
@esbuild/linux-ppc64@0.28.2 — indirect
@esbuild/linux-riscv64@0.28.2 — indirect
@esbuild/linux-s390x@0.28.2 — indirect
@esbuild/linux-x64@0.28.2 — indirect
@esbuild/netbsd-arm64@0.28.2 — indirect
@esbuild/netbsd-x64@0.28.2 — indirect
@esbuild/openbsd-arm64@0.28.2 — indirect
@esbuild/openbsd-x64@0.28.2 — indirect
@esbuild/openharmony-arm64@0.28.2 — indirect
@esbuild/sunos-x64@0.28.2 — indirect
@esbuild/win32-arm64@0.28.2 — indirect
@esbuild/win32-ia32@0.28.2 — indirect
@esbuild/win32-x64@0.28.2 — indirect
@sindresorhus/merge-streams@4.0.0 — indirect
fast-glob@3.3.3 — indirect
is-path-inside@4.0.0 — indirect
micromatch@4.0.8 — indirect
slash@5.1.0 — indirect
unicorn-magic@0.4.1 — indirect
duplexer@0.1.2 — indirect
@ioredis/commands@1.10.0 — indirect
cluster-key-slot@1.1.1 — indirect
debug@4.4.3 — indirect
denque@2.1.0 — indirect
redis-errors@1.2.0 — indirect
redis-parser@3.0.0 — indirect
standard-as-callback@2.1.0 — indirect
@parcel/watcher-wasm@2.6.0 — indirect
citty@0.2.2 — indirect
crossws@0.4.17 — indirect
get-port-please@3.2.0 — indirect
http-shutdown@1.2.2 — indirect
node-forge@1.4.2 — indirect
tinyclip@0.1.15 — indirect
untun@0.2.2 — indirect
uqr@0.1.3 — indirect
@babel/parser@7.29.11 — indirect
@babel/types@7.29.11 — indirect
source-map-js@1.2.2 — indirect
@napi-rs/lzma-linux-x64-gnu@1.5.1 — indirect
@rollup/rollup-android-arm-eabi@4.65.1 — indirect
@rollup/rollup-android-arm64@4.65.1 — indirect
@rollup/rollup-darwin-arm64@4.65.1 — indirect
@rollup/rollup-darwin-x64@4.65.1 — indirect
@rollup/rollup-freebsd-arm64@4.65.1 — indirect
@rollup/rollup-freebsd-x64@4.65.1 — indirect
@rollup/rollup-linux-arm-gnueabihf@4.65.1 — indirect
@rollup/rollup-linux-arm-musleabihf@4.65.1 — indirect
@rollup/rollup-linux-arm64-gnu@4.65.1 — indirect
@rollup/rollup-linux-arm64-musl@4.65.1 — indirect
@rollup/rollup-linux-loong64-gnu@4.65.1 — indirect
@rollup/rollup-linux-loong64-musl@4.65.1 — indirect
@rollup/rollup-linux-ppc64-gnu@4.65.1 — indirect
@rollup/rollup-linux-ppc64-musl@4.65.1 — indirect
@rollup/rollup-linux-riscv64-gnu@4.65.1 — indirect
@rollup/rollup-linux-riscv64-musl@4.65.1 — indirect
@rollup/rollup-linux-s390x-gnu@4.65.1 — indirect
@rollup/rollup-linux-x64-gnu@4.65.1 — indirect
@rollup/rollup-linux-x64-musl@4.65.1 — indirect
@rollup/rollup-openbsd-x64@4.65.1 — indirect
@rollup/rollup-openharmony-arm64@4.65.1 — indirect
@rollup/rollup-win32-arm64-msvc@4.65.1 — indirect
@rollup/rollup-win32-ia32-msvc@4.65.1 — indirect
@rollup/rollup-win32-x64-gnu@4.65.1 — indirect
@rollup/rollup-win32-x64-msvc@4.65.1 — indirect
@types/estree@1.0.9 — indirect
fsevents@2.3.3 — indirect
open@11.0.4 — indirect
source-map@0.8.0 — indirect
yargs@18.2.0 — indirect
encodeurl@2.0.0 — indirect
escape-html@1.0.3 — indirect
parseurl@1.3.3 — indirect
send@1.2.1 — indirect
local-pkg@1.2.1 — indirect
magic-string@1.4.5 — indirect
strip-literal@4.0.0 — indirect
unplugin@3.6.0 — indirect
@poppinss/colors@4.1.6 — indirect
@poppinss/dumper@0.7.0 — indirect
@speed-highlight/core@1.2.24 — indirect
cookie-es@3.1.1 — indirect
@poppinss/exception@1.2.3 — indirect
error-stack-parser-es@1.0.5 — indirect
normalize-path@3.0.0 — indirect
picomatch@2.3.2 — indirect
@vue/compiler-core@3.5.44 — indirect
@vue/compiler-ssr@3.5.44 — indirect
estree-walker@2.0.2 — indirect
postcss@8.5.32 — indirect
@vue/reactivity@3.5.44 — indirect
@vue/runtime-core@3.5.44 — indirect
csstype@3.2.3 — indirect
confbox@0.1.8 — indirect
@jridgewell/gen-mapping@0.3.13 — indirect
estree-walker@2.0.2 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
@jridgewell/source-map@0.3.11 — indirect
commander@2.20.3 — indirect
source-map-support@0.5.21 — indirect
detect-libc@2.1.2 — indirect
https-proxy-agent@7.0.6 — indirect
node-fetch@2.7.0 — indirect
nopt@8.1.0 — indirect
tar@7.5.22 — indirect
file-uri-to-path@1.0.0 — indirect
minimatch@10.2.6 — indirect
minipass@7.1.3 — indirect
path-scurry@2.0.2 — indirect
glob@10.5.0 — indirect
is-stream@2.0.1 — indirect
lazystream@1.0.1 — indirect
lodash@4.18.1 — indirect
abort-controller@3.0.0 — indirect
buffer@6.0.3 — indirect
events@3.3.0 — indirect
process@0.11.10 — indirect
string_decoder@1.3.0 — indirect
minimatch@5.1.9 — indirect
b4a@1.9.0 — indirect
bare-fs@4.8.4 — indirect
fast-fifo@1.3.2 — indirect
streamx@2.28.1 — indirect
compress-commons@6.0.2 — indirect
tagged-tag@1.0.0 — indirect
@nodelib/fs.stat@2.0.5 — indirect
@nodelib/fs.walk@1.2.8 — indirect
glob-parent@5.1.2 — indirect
merge2@1.4.1 — indirect
braces@3.0.3 — indirect
picomatch@2.3.2 — indirect
ms@2.1.3 — indirect
@parcel/watcher-wasm>2.6.0>napi-wasm@1.1.0 — indirect
is-glob@4.0.3 — indirect
@babel/helper-string-parser@7.29.11 — indirect
@babel/helper-validator-identifier@7.29.7 — indirect
default-browser@5.5.1 — indirect
define-lazy-prop@3.0.0 — indirect
is-in-ssh@1.0.0 — indirect
is-inside-container@1.0.0 — indirect
powershell-utils@0.2.1 — indirect
wsl-utils@1.0.1 — indirect
cliui@9.0.1 — indirect
escalade@3.2.0 — indirect
get-caller-file@2.0.5 — indirect
string-width@8.3.0 — indirect
y18n@5.0.8 — indirect
yargs-parser@22.0.0 — indirect
fresh@2.0.0 — indirect
http-errors@2.0.1 — indirect
mime-types@3.0.2 — indirect
on-finished@2.4.2 — indirect
range-parser@1.3.0 — indirect
statuses@2.0.2 — indirect
quansync@0.2.11 — indirect
js-tokens@10.0.0 — indirect
kleur@4.1.5 — indirect
@sindresorhus/is@7.2.0 — indirect
supports-color@10.2.2 — indirect
entities@7.0.1 — indirect
estree-walker@2.0.2 — indirect
nanoid@3.3.20 — indirect
picocolors@1.1.1 — indirect
hasown@2.0.4 — indirect
buffer-from@1.1.2 — indirect
source-map@0.6.1 — indirect
agent-base@7.1.4 — indirect
whatwg-url@5.0.0 — indirect
abbrev@3.0.1 — indirect
@isaacs/fs-minipass@4.0.1 — indirect
chownr@3.0.0 — indirect
minizlib@3.1.0 — indirect
yallist@5.0.0 — indirect
brace-expansion@5.0.12 — indirect
foreground-child@3.3.1 — indirect
jackspeak@3.4.3 — indirect
minimatch@9.0.9 — indirect
package-json-from-dist@1.0.1 — indirect
path-scurry@1.11.1 — indirect
readable-stream@2.3.8 — indirect
event-target-shim@5.0.1 — indirect
base64-js@1.5.1 — indirect
ieee754@1.2.1 — indirect
safe-buffer@5.2.1 — indirect
brace-expansion@2.1.7 — indirect
bare-events@2.9.2 — indirect
bare-path@3.1.2 — indirect
bare-stream@2.13.4 — indirect
bare-url@2.5.5 — indirect
events-universal@1.0.1 — indirect
text-decoder@1.2.7 — indirect
crc-32@1.2.2 — indirect
crc32-stream@6.0.0 — indirect
@nodelib/fs.scandir@2.1.5 — indirect
fastq@1.20.3 — indirect
fill-range@7.1.1 — indirect
is-extglob@2.1.1 — indirect
bundle-name@4.1.1 — indirect
default-browser-id@5.0.1 — indirect
is-docker@3.0.0 — indirect
is-wsl@3.1.1 — indirect
string-width@7.2.0 — indirect
strip-ansi@7.2.0 — indirect
wrap-ansi@9.0.2 — indirect
get-east-asian-width@1.7.0 — indirect
depd@2.0.0 — indirect
inherits@2.0.4 — indirect
setprototypeof@1.2.0 — indirect
toidentifier@1.0.1 — indirect
mime-db@1.54.0 — indirect
ee-first@1.1.1 — indirect
function-bind@1.1.2 — indirect
tr46@0.0.3 — indirect
webidl-conversions@3.0.1 — indirect
balanced-match@4.0.4 — indirect
cross-spawn@7.0.6 — indirect
signal-exit@4.1.0 — indirect
@isaacs/cliui@8.0.2 — indirect
@pkgjs/parseargs@0.11.0 — indirect
brace-expansion@2.1.7 — indirect
lru-cache@10.4.3 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
balanced-match@1.0.2 — indirect
teex@1.0.1 — indirect
run-parallel@1.2.0 — indirect
reusify@1.1.0 — indirect
to-regex-range@5.0.1 — indirect
run-applescript@7.1.0 — indirect
emoji-regex@10.6.0 — indirect
ansi-regex@6.4.0 — indirect
ansi-styles@6.2.3 — indirect
path-key@3.1.1 — indirect
shebang-command@2.0.0 — indirect
which@2.0.2 — indirect
string-width@4.2.3 — indirect
string-width@5.1.2 — indirect
strip-ansi@6.0.1 — indirect
wrap-ansi@7.0.0 — indirect
wrap-ansi@8.1.0 — indirect
balanced-match@1.0.2 — indirect
queue-microtask@1.2.3 — indirect
is-number@7.0.0 — indirect
shebang-regex@3.0.0 — indirect
isexe@2.0.0 — indirect
emoji-regex@8.0.0 — indirect
is-fullwidth-code-point@3.0.0 — indirect
strip-ansi@6.0.1 — indirect
eastasianwidth@0.2.0 — indirect
emoji-regex@9.2.2 — indirect
ansi-regex@5.0.1 — indirect
ansi-styles@4.3.0 — indirect
string-width@4.2.3 — indirect
strip-ansi@6.0.1 — indirect
ansi-regex@5.0.1 — indirect
color-convert@2.0.1 — indirect
emoji-regex@8.0.0 — indirect
ansi-regex@5.0.1 — indirect
color-name@1.1.4 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Code-Review	2/10 — Found 6/25 approved changesets -- score normalized to 2
Security-Policy	10/10 — security policy file detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	2/10 — badge detected: InProgress
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
Binary-Artifacts	9/10 — binaries present in source code
License	10/10 — license file detected
Pinned-Dependencies	9/10 — dependency not pinned by hash detected -- score normalized to 9
Branch-Protection	0/10 — branch protection not enabled on development/release branches
Fuzzing	0/10 — project is not fuzzed
SAST	10/10 — SAST tool is run on all commits

Evidence and freshness

https://registry.npmjs.org/%40nuxt%2Fnitro-server/4.4.4 — retrieved 2026-10-29T10:56:46.200Z
https://api.deps.dev/v3/projects/github.com%2Fnuxt%2Fnuxt — retrieved 2026-10-29T05:10:21.275Z
https://api.deps.dev/v3/systems/npm/packages/%40nuxt%2Fnitro-server/versions/4.4.4 — retrieved 2026-10-29T10:56:46.736Z
https://api.deps.dev/v3/systems/npm/packages/%40nuxt%2Fnitro-server/versions/4.4.4:dependencies — retrieved 2026-10-29T10:56:46.787Z