@whiskeysockets/baileys 6.7.4
WhatsApp API
@whiskeysockets/baileys@6.7.4 was published on 2024-06-02. Its manifest declares 15 runtime dependencies and 4 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.
Deprecated: This version is affected by a zero-day vulnerability that allows spoofing of messages, please update to the latest versions (6.7.22^ or 7.0.0-rc12^)! For more information, check out the public advisory at https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg
All @whiskeysockets/baileys versions · Permanent reference to 6.7.4 · View npm registry JSON · Latest release
Package specifications
| Version | 6.7.4 |
|---|---|
| License declaration | MIT |
| Published | 2024-06-02T22:06:05.185Z |
| Node.js requirement | Not declared |
| Type declarations | Bundled declarations |
| Runtime dependency count | 15 |
| Peer requirement count | 4 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 8025.45 KiB |
| Published file count | 156 |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | lib/index.js |
| Side effects declaration | Not declared |
| Direct advisories | 1 |
| Resolved graph dependencies | 114 |
| Repository stars | 11501 |
| Repository forks | 3473 |
Install @whiskeysockets/baileys 6.7.4
npm install @whiskeysockets/baileys@6.7.4 pnpm add @whiskeysockets/baileys@6.7.4 yarn add @whiskeysockets/baileys@6.7.4
Runtime dependencies
- ws ^8.13.0
- pino ^7.0.0
- uuid ^9.0.0
- axios ^1.3.3
- libsignal github:adiwajshing/libsignal-node
- @hapi/boom ^9.1.3
- async-lock ^1.4.1
- node-cache ^5.1.2
- protobufjs ^7.2.4
- futoin-hkdf ^1.5.1
- audio-decode ^2.1.3
- cache-manager 4.0.1
- music-metadata ^7.12.3
- libphonenumber-js ^1.10.20
- @adiwajshing/keyed-db ^0.2.4
Peer requirements
- jimp ^0.16.1 (optional peer)
- sharp ^0.32.2 (optional peer)
- link-preview-js ^3.0.0 (optional peer)
- qrcode-terminal ^0.12.0 (optional peer)
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- @adiwajshing/keyed-db@0.2.4 — direct
- @eshaz/web-worker@1.2.2 — indirect
- @hapi/boom@9.1.4 — direct
- @hapi/hoek@9.3.0 — indirect
- @protobufjs/aspromise@1.1.2 — indirect
- @protobufjs/base64@1.1.2 — indirect
- @protobufjs/codegen@2.0.5 — indirect
- @protobufjs/eventemitter@1.1.1 — indirect
- @protobufjs/fetch@1.1.1 — indirect
- @protobufjs/float@1.0.2 — indirect
- @protobufjs/path@1.1.2 — indirect
- @protobufjs/pool@1.1.0 — indirect
- @protobufjs/utf8@1.1.2 — indirect
- @thi.ng/bitstream@2.4.55 — indirect
- @thi.ng/errors@2.6.17 — indirect
- @tokenizer/token@0.3.0 — indirect
- @types/node@26.6.6 — indirect
- @wasm-audio-decoders/common@9.0.7 — indirect
- @wasm-audio-decoders/flac@0.2.11 — indirect
- @wasm-audio-decoders/ogg-vorbis@0.1.20 — indirect
- @wasm-audio-decoders/opus-ml@0.0.3 — indirect
- abort-controller@3.0.0 — indirect
- agent-base@6.0.2 — indirect
- async@3.2.3 — indirect
- async-function@1.0.0 — indirect
- async-generator-function@1.0.0 — indirect
- async-lock@1.4.1 — direct
- asynckit@0.4.0 — indirect
- atomic-sleep@1.0.0 — indirect
- audio-buffer@5.0.0 — indirect
- audio-decode@2.2.3 — direct
- audio-type@2.8.0 — indirect
- axios@1.21.0 — direct
- base64-js@1.5.1 — indirect
- buffer@6.0.3 — indirect
- cache-manager@4.0.1 — direct
- call-bind-apply-helpers@1.0.2 — indirect
- clone@2.1.2 — indirect
- codec-parser@2.5.0 — indirect
- combined-stream@1.0.8 — indirect
- content-type@1.0.5 — indirect
- debug@4.4.3 — indirect
- delayed-stream@1.0.0 — indirect
- dunder-proto@1.0.1 — indirect
- duplexify@4.1.3 — indirect
- end-of-stream@1.4.5 — indirect
- es-define-property@1.0.1 — indirect
- es-errors@1.3.0 — indirect
- es-object-atoms@1.1.2 — indirect
- es-set-tostringtag@2.1.0 — indirect
- event-target-shim@5.0.1 — indirect
- events@3.3.0 — indirect
- fast-redact@3.5.0 — indirect
- file-type@16.5.4 — indirect
- follow-redirects@1.16.2 — indirect
- form-data@4.0.6 — indirect
- function-bind@1.1.2 — indirect
- futoin-hkdf@1.5.3 — direct
- generator-function@2.0.1 — indirect
- get-intrinsic@1.3.1 — indirect
- get-proto@1.0.1 — indirect
- gopd@1.2.0 — indirect
- has-symbols@1.1.0 — indirect
- has-tostringtag@1.0.2 — indirect
- hasown@2.0.4 — indirect
- https-proxy-agent@5.0.1 — indirect
- ieee754@1.2.1 — indirect
- inherits@2.0.4 — indirect
- libphonenumber-js@1.13.15 — direct
- lodash.clonedeep@4.5.0 — indirect
- long@5.3.2 — indirect
- lru-cache@7.18.3 — indirect
- math-intrinsics@1.1.0 — indirect
- media-typer@1.1.1 — indirect
- mime-db@1.52.0 — indirect
- mime-types@2.1.35 — indirect
- mpg123-decoder@1.0.3 — indirect
- ms@2.1.3 — indirect
- music-metadata@7.14.0 — direct
- node-cache@5.1.2 — direct
- node-wav@0.0.2 — indirect
- ogg-opus-decoder@1.7.5 — indirect
- on-exit-leak-free@0.2.0 — indirect
- once@1.4.0 — indirect
- opus-decoder@0.7.12 — indirect
- peek-readable@4.1.0 — indirect
- pino@7.11.0 — direct
- pino-abstract-transport@0.5.0 — indirect
- pino-std-serializers@4.0.0 — indirect
- process@0.11.10 — indirect
- process-warning@1.0.0 — indirect
- protobufjs@7.6.6 — direct
- proxy-from-env@2.1.0 — indirect
- qoa-format@1.0.1 — indirect
- quick-format-unescaped@4.0.4 — indirect
- readable-stream@3.6.2 — indirect
- readable-stream@4.8.0 — indirect
- readable-web-to-node-stream@3.0.4 — indirect
- real-require@0.1.0 — indirect
- safe-buffer@5.2.1 — indirect
- safe-stable-stringify@2.5.0 — indirect
- simple-yenc@1.0.4 — indirect
- sonic-boom@2.8.0 — indirect
- split2@4.2.0 — indirect
- stream-shift@1.0.3 — indirect
- string_decoder@1.3.0 — indirect
- strtok3@6.3.0 — indirect
- thread-stream@0.15.2 — indirect
- token-types@4.2.1 — indirect
- undici-types@8.9.0 — indirect
- util-deprecate@1.0.2 — indirect
- uuid@9.0.1 — direct
- wrappy@1.0.2 — indirect
- ws@8.22.1 — direct
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Known direct advisories
Evidence and freshness
- Readable npm registry JSON — retrieved 2026-11-02T01:30:37.526Z
- https://api.deps.dev/v3/projects/github.com%2FWhiskeySockets%2FBaileys — retrieved 2026-11-02T00:15:35.566Z
- https://api.deps.dev/v3/systems/npm/packages/%40whiskeysockets%2Fbaileys/versions/6.7.4 — retrieved 2026-11-02T01:30:37.907Z
- https://api.deps.dev/v3/systems/npm/packages/%40whiskeysockets%2Fbaileys/versions/6.7.4:dependencies — retrieved 2026-11-02T01:30:37.951Z