apollo-server-core 2.5.0-alpha.1

Core engine for Apollo GraphQL server

apollo-server-core@2.5.0-alpha.1 was published on 2019-03-26. Its manifest declares 20 runtime dependencies and 1 peer requirement. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=6.

Deprecated: The `apollo-server-core` package is part of Apollo Server v2 and v3, which are now end-of-life (as of October 22nd 2023 and October 22nd 2024, respectively). This package's functionality is now found in the `@apollo/server` package. See https://www.apollographql.com/docs/apollo-server/previous-versions/ for more details.

All apollo-server-core versions · Permanent reference to 2.5.0-alpha.1 · Latest release

Package specifications

Version	2.5.0-alpha.1
License declaration	MIT
Published	2019-03-26T18:24:34.903Z
Node.js requirement	>=6
Type declarations	Bundled declarations
Runtime dependency count	20
Peer requirement count	1
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	216.13 KiB
Published file count	89
Package type	Not declared
ES module entry	Not declared
Default entry	dist/index.js
Side effects declaration	Not declared
Direct advisories	3
Resolved graph dependencies	184
Repository stars	13954
Repository forks	2001

Install apollo-server-core 2.5.0-alpha.1

npm install apollo-server-core@2.5.0-alpha.1
pnpm add apollo-server-core@2.5.0-alpha.1
yarn add apollo-server-core@2.5.0-alpha.1

Runtime dependencies

ws ^6.0.0
sha.js ^2.4.11
@types/ws ^6.0.0
graphql-tag ^2.9.2
graphql-tools ^4.0.0
apollo-tracing 0.6.0-alpha.0
graphql-upload ^8.0.2
apollo-datasource 0.4.0-alpha.0
apollo-server-env 2.3.0-alpha.0
graphql-extensions 0.6.0-alpha.1
apollo-cache-control 0.6.0-alpha.0
apollo-server-errors 2.2.1
apollo-server-caching 0.4.0-alpha.0
graphql-subscriptions ^1.0.0
apollo-engine-reporting 1.1.0-alpha.1
apollo-server-plugin-base 0.4.0-alpha.1
fast-json-stable-stringify ^2.0.0
subscriptions-transport-ws ^0.9.11
@apollographql/apollo-tools ^0.3.3
@apollographql/graphql-playground-html ^1.6.6

Peer requirements

graphql ^0.12.0 || ^0.13.0 || ^14.0.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@apollographql/apollo-tools@0.3.7 — direct
@apollographql/graphql-playground-html@1.6.29 — direct
@types/ws@6.0.4 — direct
apollo-cache-control@0.6.0-alpha.0 — direct
apollo-datasource@0.4.0-alpha.0 — direct
apollo-engine-reporting@1.1.0-alpha.1 — direct
apollo-server-caching@0.4.0-alpha.0 — direct
apollo-server-env@2.3.0-alpha.0 — direct
apollo-server-errors@2.2.1 — direct
apollo-server-plugin-base@0.4.0-alpha.1 — direct
apollo-tracing@0.6.0-alpha.0 — direct
fast-json-stable-stringify@2.1.0 — direct
graphql-extensions@0.6.0-alpha.1 — direct
graphql-subscriptions@1.2.1 — direct
graphql-tag@2.12.7 — direct
graphql-tools@4.0.8 — direct
graphql-upload@8.1.0 — direct
sha.js@2.4.12 — direct
subscriptions-transport-ws@0.9.19 — direct
ws@6.2.6 — direct
apollo-env@0.5.1 — indirect
xss@1.0.17 — indirect
@types/node@26.6.6 — indirect
graphql-extensions@0.6.0-alpha.0 — indirect
apollo-engine-reporting-protobuf@0.3.0-alpha.0 — indirect
apollo-graphql@0.2.0 — indirect
apollo-server-core@2.5.0-alpha.1 — indirect
async-retry@1.3.3 — indirect
lru-cache@5.1.1 — indirect
node-fetch@2.7.0 — indirect
util.promisify@1.1.3 — indirect
graphql-extensions@0.6.0-alpha.0 — indirect
iterall@1.3.0 — indirect
tslib@2.8.1 — indirect
apollo-link@1.2.14 — indirect
apollo-utilities@1.3.4 — indirect
deprecated-decorator@0.1.6 — indirect
uuid@3.4.0 — indirect
busboy@0.3.1 — indirect
fs-capacitor@2.0.4 — indirect
http-errors@1.8.1 — indirect
object-path@0.11.8 — indirect
inherits@2.0.4 — indirect
safe-buffer@5.2.1 — indirect
to-buffer@1.2.2 — indirect
backo2@1.0.2 — indirect
eventemitter3@3.1.2 — indirect
symbol-observable@1.2.0 — indirect
async-limiter@1.0.1 — indirect
core-js@3.51.0 — indirect
commander@2.20.3 — indirect
cssfilter@0.0.10 — indirect
undici-types@8.9.0 — indirect
protobufjs@6.11.6 — indirect
apollo-env@0.4.0 — indirect
lodash.sortby@4.7.0 — indirect
retry@0.13.1 — indirect
yallist@3.1.1 — indirect
whatwg-url@5.0.0 — indirect
call-bind@1.0.9 — indirect
call-bound@1.0.4 — indirect
define-data-property@1.1.4 — indirect
define-properties@1.2.1 — indirect
es-errors@1.3.0 — indirect
es-object-atoms@1.1.2 — indirect
for-each@0.3.5 — indirect
get-intrinsic@1.3.1 — indirect
has-proto@1.2.0 — indirect
has-symbols@1.1.0 — indirect
object.getownpropertydescriptors@2.1.9 — indirect
safe-array-concat@1.1.4 — indirect
ts-invariant@0.4.4 — indirect
tslib@1.14.1 — indirect
zen-observable-ts@0.8.21 — indirect
@wry/equality@0.1.11 — indirect
tslib@1.14.1 — indirect
dicer@0.3.0 — indirect
depd@1.1.2 — indirect
setprototypeof@1.2.0 — indirect
statuses@1.5.0 — indirect
toidentifier@1.0.1 — indirect
isarray@2.0.5 — indirect
typed-array-buffer@1.0.3 — indirect
@protobufjs/aspromise@1.1.2 — indirect
@protobufjs/base64@1.1.2 — indirect
@protobufjs/codegen@2.0.5 — indirect
@protobufjs/eventemitter@1.1.1 — indirect
@protobufjs/fetch@1.1.1 — indirect
@protobufjs/float@1.0.2 — indirect
@protobufjs/inquire@1.1.2 — indirect
@protobufjs/path@1.1.2 — indirect
@protobufjs/pool@1.1.0 — indirect
@protobufjs/utf8@1.1.2 — indirect
@types/long@4.0.2 — indirect
long@4.0.0 — indirect
core-js@3.0.0-beta.13 — indirect
tr46@0.0.3 — indirect
webidl-conversions@3.0.1 — indirect
call-bind-apply-helpers@1.0.2 — indirect
es-define-property@1.0.1 — indirect
set-function-length@1.2.2 — indirect
gopd@1.2.0 — indirect
has-property-descriptors@1.0.2 — indirect
object-keys@1.1.1 — indirect
is-callable@1.2.7 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
function-bind@1.1.2 — indirect
generator-function@2.0.1 — indirect
get-proto@1.0.1 — indirect
hasown@2.0.4 — indirect
math-intrinsics@1.1.0 — indirect
dunder-proto@1.0.1 — indirect
array.prototype.reduce@1.0.8 — indirect
es-abstract@1.24.2 — indirect
tslib@1.14.1 — indirect
tslib@1.14.1 — indirect
zen-observable@0.8.15 — indirect
tslib@1.14.1 — indirect
streamsearch@0.1.2 — indirect
is-typed-array@1.1.15 — indirect
es-array-method-boxes-properly@1.0.0 — indirect
is-string@1.1.1 — indirect
array-buffer-byte-length@1.0.2 — indirect
arraybuffer.prototype.slice@1.0.4 — indirect
available-typed-arrays@1.0.7 — indirect
data-view-buffer@1.0.2 — indirect
data-view-byte-length@1.0.2 — indirect
data-view-byte-offset@1.0.1 — indirect
es-set-tostringtag@2.1.0 — indirect
es-to-primitive@1.3.4 — indirect
function.prototype.name@1.2.0 — indirect
get-symbol-description@1.1.0 — indirect
globalthis@1.0.4 — indirect
internal-slot@1.1.0 — indirect
is-array-buffer@3.0.5 — indirect
is-data-view@1.0.2 — indirect
is-negative-zero@2.0.3 — indirect
is-regex@1.2.1 — indirect
is-set@2.0.3 — indirect
is-shared-array-buffer@1.0.4 — indirect
is-weakref@1.1.1 — indirect
object-inspect@1.13.4 — indirect
object.assign@4.1.7 — indirect
own-keys@1.0.2 — indirect
regexp.prototype.flags@1.5.4 — indirect
safe-push-apply@1.0.0 — indirect
safe-regex-test@1.1.0 — indirect
set-proto@1.0.0 — indirect
stop-iteration-iterator@1.1.0 — indirect
string.prototype.trim@1.2.11 — indirect
string.prototype.trimend@1.0.10 — indirect
string.prototype.trimstart@1.0.8 — indirect
typed-array-byte-length@1.0.3 — indirect
typed-array-byte-offset@1.0.5 — indirect
typed-array-length@1.0.8 — indirect
unbox-primitive@1.1.0 — indirect
which-typed-array@1.1.24 — indirect
has-tostringtag@1.0.2 — indirect
possible-typed-array-names@1.1.0 — indirect
es-abstract-get@1.0.0 — indirect
is-date-object@1.1.0 — indirect
is-symbol@1.1.1 — indirect
functions-have-names@1.2.3 — indirect
is-document.all@1.0.0 — indirect
side-channel@1.1.1 — indirect
set-function-name@2.0.2 — indirect
reflect.getprototypeof@1.0.10 — indirect
has-bigints@1.1.0 — indirect
which-boxed-primitive@1.1.1 — indirect
side-channel-list@1.0.1 — indirect
side-channel-map@1.0.1 — indirect
side-channel-weakmap@1.0.2 — indirect
which-builtin-type@1.2.1 — indirect
is-bigint@1.1.0 — indirect
is-boolean-object@1.2.2 — indirect
is-number-object@1.1.1 — indirect
is-async-function@2.1.1 — indirect
is-finalizationregistry@1.1.1 — indirect
is-generator-function@1.1.2 — indirect
which-collection@1.0.2 — indirect
is-map@2.0.3 — indirect
is-weakmap@2.0.2 — indirect
is-weakset@2.0.4 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Maintained	2/10 — 1 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 2
Code-Review	3/10 — Found 8/21 approved changesets -- score normalized to 3
Binary-Artifacts	10/10 — no binaries found in the repo
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	9/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	4/10 — dependency not pinned by hash detected -- score normalized to 4
License	10/10 — license file detected
Security-Policy	10/10 — security policy file detected
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/apollo-server-core/2.5.0-alpha.1 — retrieved 2026-10-30T02:11:24.872Z
https://api.deps.dev/v3/projects/github.com%2Fapollographql%2Fapollo-server — retrieved 2026-10-29T22:06:09.032Z
https://api.deps.dev/v3/systems/npm/packages/apollo-server-core/versions/2.5.0-alpha.1 — retrieved 2026-10-30T02:11:25.376Z
https://api.deps.dev/v3/systems/npm/packages/apollo-server-core/versions/2.5.0-alpha.1:dependencies — retrieved 2026-10-30T02:11:25.481Z