@serialport/bindings

The bindings package has been renamed [`@serialport/bindings-cpp`](https://www.npmjs.com/package/@serialport/bindings-cpp) and it's code has been moved out of the monorepo to it's [own repository](https://github.com/serialport/bindings-cpp/).

@serialport/bindings@9.2.9 was published on 2022-02-19. Its manifest declares 6 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=10.0.0.

Deprecated: This package has been renamed to @serialport/bindings-cpp.

All @serialport/bindings versions · Permanent reference to 9.2.9 · View npm registry JSON

Package specifications

Version	9.2.9
License declaration	MIT
Published	2022-02-19T21:40:22.017Z
Node.js requirement	>=10.0.0
Type declarations	Not declared
Runtime dependency count	6
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	103.10 KiB
Published file count	27
Package type	Not declared
ES module entry	Not declared
Default entry	lib
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	43
Repository stars	5993
Repository forks	1008

Install @serialport/bindings 9.2.9

npm install @serialport/bindings@9.2.9
pnpm add @serialport/bindings@9.2.9
yarn add @serialport/bindings@9.2.9

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@serialport/binding-abstract@9.2.3 — direct
@serialport/parser-delimiter@9.2.4 — indirect
@serialport/parser-readline@9.2.4 — direct
base64-js@1.5.1 — indirect
bindings@1.5.0 — direct
bl@4.1.0 — indirect
buffer@5.7.1 — indirect
chownr@1.1.4 — indirect
debug@4.4.3 — direct
decompress-response@6.0.0 — indirect
deep-extend@0.6.0 — indirect
detect-libc@2.1.2 — indirect
end-of-stream@1.4.5 — indirect
expand-template@2.0.3 — indirect
file-uri-to-path@1.0.0 — indirect
fs-constants@1.0.0 — indirect
github-from-package@0.0.0 — indirect
ieee754@1.2.1 — indirect
inherits@2.0.4 — indirect
ini@1.3.8 — indirect
mimic-response@3.1.0 — indirect
minimist@1.2.8 — indirect
mkdirp-classic@0.5.3 — indirect
ms@2.1.3 — indirect
nan@2.30.0 — direct
napi-build-utils@2.0.0 — indirect
node-abi@3.101.0 — indirect
once@1.4.0 — indirect
prebuild-install@7.1.3 — direct
pump@3.0.4 — indirect
rc@1.2.8 — indirect
readable-stream@3.6.2 — indirect
safe-buffer@5.2.1 — indirect
semver@7.8.6 — indirect
simple-concat@1.0.1 — indirect
simple-get@4.0.1 — indirect
string_decoder@1.3.0 — indirect
strip-json-comments@2.0.1 — indirect
tar-fs@2.1.5 — indirect
tar-stream@2.2.0 — indirect
tunnel-agent@0.6.0 — indirect
util-deprecate@1.0.2 — indirect
wrappy@1.0.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Code-Review	1/10 — Found 5/30 approved changesets -- score normalized to 1
Security-Policy	9/10 — security policy file detected
Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	7/10 — dependency not pinned by hash detected -- score normalized to 7
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-05T15:01:42.577Z
https://api.deps.dev/v3/systems/npm/packages/%40serialport%2Fbindings/versions/9.2.9 — retrieved 2026-11-05T15:01:42.830Z
https://api.deps.dev/v3/systems/npm/packages/%40serialport%2Fbindings/versions/9.2.9:dependencies — retrieved 2026-11-05T15:01:42.861Z
https://api.deps.dev/v3/projects/github.com%2Fserialport%2Fnode-serialport — retrieved 2026-11-05T13:13:26.195Z