@whiskeysockets/baileys 6.2.0
WhatsApp API
@whiskeysockets/baileys@6.2.0 was published on 2023-06-07. Its manifest declares 11 runtime dependencies and 5 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.
Deprecated: This version is affected by a zero-day vulnerability that allows spoofing of messages, please update to the latest versions (6.7.22^ or 7.0.0-rc12^)! For more information, check out the public advisory at https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg
All @whiskeysockets/baileys versions · Permanent reference to 6.2.0 · View npm registry JSON · Latest release
Package specifications
| Version | 6.2.0 |
|---|---|
| License declaration | MIT |
| Published | 2023-06-07T11:35:17.512Z |
| Node.js requirement | Not declared |
| Type declarations | Bundled declarations |
| Runtime dependency count | 11 |
| Peer requirement count | 5 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 6295.35 KiB |
| Published file count | 139 |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | lib/index.js |
| Side effects declaration | Not declared |
| Direct advisories | 1 |
| Resolved graph dependencies | 93 |
| Repository stars | 11501 |
| Repository forks | 3473 |
Install @whiskeysockets/baileys 6.2.0
npm install @whiskeysockets/baileys@6.2.0 pnpm add @whiskeysockets/baileys@6.2.0 yarn add @whiskeysockets/baileys@6.2.0
Runtime dependencies
- ws ^8.0.0
- pino ^7.0.0
- uuid ^9.0.0
- axios ^1.3.3
- libsignal git+https://github.com/adiwajshing/libsignal-node.git
- @hapi/boom ^9.1.3
- node-cache ^5.1.2
- protobufjs ^6.11.3
- futoin-hkdf ^1.5.1
- music-metadata ^7.12.3
- libphonenumber-js ^1.10.20
Peer requirements
- jimp ^0.16.1 (optional peer)
- sharp ^0.30.5 (optional peer)
- link-preview-js ^3.0.0 (optional peer)
- qrcode-terminal ^0.12.0 (optional peer)
- @adiwajshing/keyed-db ^0.2.4 (optional peer)
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- @hapi/boom@9.1.4 — direct
- @hapi/hoek@9.3.0 — indirect
- @protobufjs/aspromise@1.1.2 — indirect
- @protobufjs/base64@1.1.2 — indirect
- @protobufjs/codegen@2.0.5 — indirect
- @protobufjs/eventemitter@1.1.1 — indirect
- @protobufjs/fetch@1.1.1 — indirect
- @protobufjs/float@1.0.2 — indirect
- @protobufjs/inquire@1.1.2 — indirect
- @protobufjs/path@1.1.2 — indirect
- @protobufjs/pool@1.1.0 — indirect
- @protobufjs/utf8@1.1.2 — indirect
- @tokenizer/token@0.3.0 — indirect
- @types/long@4.0.2 — indirect
- @types/node@26.6.6 — indirect
- abort-controller@3.0.0 — indirect
- agent-base@6.0.2 — indirect
- async-function@1.0.0 — indirect
- async-generator-function@1.0.0 — indirect
- asynckit@0.4.0 — indirect
- atomic-sleep@1.0.0 — indirect
- axios@1.21.0 — direct
- base64-js@1.5.1 — indirect
- buffer@6.0.3 — indirect
- call-bind-apply-helpers@1.0.2 — indirect
- clone@2.1.2 — indirect
- combined-stream@1.0.8 — indirect
- content-type@1.0.5 — indirect
- debug@4.4.3 — indirect
- delayed-stream@1.0.0 — indirect
- dunder-proto@1.0.1 — indirect
- duplexify@4.1.3 — indirect
- end-of-stream@1.4.5 — indirect
- es-define-property@1.0.1 — indirect
- es-errors@1.3.0 — indirect
- es-object-atoms@1.1.2 — indirect
- es-set-tostringtag@2.1.0 — indirect
- event-target-shim@5.0.1 — indirect
- events@3.3.0 — indirect
- fast-redact@3.5.0 — indirect
- file-type@16.5.4 — indirect
- follow-redirects@1.16.2 — indirect
- form-data@4.0.6 — indirect
- function-bind@1.1.2 — indirect
- futoin-hkdf@1.5.3 — direct
- generator-function@2.0.1 — indirect
- get-intrinsic@1.3.1 — indirect
- get-proto@1.0.1 — indirect
- gopd@1.2.0 — indirect
- has-symbols@1.1.0 — indirect
- has-tostringtag@1.0.2 — indirect
- hasown@2.0.4 — indirect
- https-proxy-agent@5.0.1 — indirect
- ieee754@1.2.1 — indirect
- inherits@2.0.4 — indirect
- libphonenumber-js@1.13.15 — direct
- long@4.0.0 — indirect
- math-intrinsics@1.1.0 — indirect
- media-typer@1.1.1 — indirect
- mime-db@1.52.0 — indirect
- mime-types@2.1.35 — indirect
- ms@2.1.3 — indirect
- music-metadata@7.14.0 — direct
- node-cache@5.1.2 — direct
- on-exit-leak-free@0.2.0 — indirect
- once@1.4.0 — indirect
- peek-readable@4.1.0 — indirect
- pino@7.11.0 — direct
- pino-abstract-transport@0.5.0 — indirect
- pino-std-serializers@4.0.0 — indirect
- process@0.11.10 — indirect
- process-warning@1.0.0 — indirect
- protobufjs@6.11.6 — direct
- proxy-from-env@2.1.0 — indirect
- quick-format-unescaped@4.0.4 — indirect
- readable-stream@3.6.2 — indirect
- readable-stream@4.8.0 — indirect
- readable-web-to-node-stream@3.0.4 — indirect
- real-require@0.1.0 — indirect
- safe-buffer@5.2.1 — indirect
- safe-stable-stringify@2.5.0 — indirect
- sonic-boom@2.8.0 — indirect
- split2@4.2.0 — indirect
- stream-shift@1.0.3 — indirect
- string_decoder@1.3.0 — indirect
- strtok3@6.3.0 — indirect
- thread-stream@0.15.2 — indirect
- token-types@4.2.1 — indirect
- undici-types@8.9.0 — indirect
- util-deprecate@1.0.2 — indirect
- uuid@9.0.1 — direct
- wrappy@1.0.2 — indirect
- ws@8.22.1 — direct
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Known direct advisories
Evidence and freshness
- Readable npm registry JSON — retrieved 2026-11-04T17:02:03.536Z
- https://api.deps.dev/v3/systems/npm/packages/%40whiskeysockets%2Fbaileys/versions/6.2.0:dependencies — retrieved 2026-11-04T17:02:03.651Z
- https://api.deps.dev/v3/systems/npm/packages/%40whiskeysockets%2Fbaileys/versions/6.2.0 — retrieved 2026-11-04T17:02:03.684Z
- https://api.deps.dev/v3/projects/github.com%2FWhiskeySockets%2FBaileys — retrieved 2026-11-04T12:57:39.864Z