apollo-server-koa 2.2.5

Production-ready Node.js GraphQL server for Koa

apollo-server-koa@2.2.5 was published on 2018-11-29. Its manifest declares 17 runtime dependencies and 1 peer requirement. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=6.

Deprecated: The `apollo-server-koa` package is part of Apollo Server v2 and v3, which are now end-of-life (as of October 22nd 2023 and October 22nd 2024, respectively). This package's functionality is now found in the `@apollo/server` package. See https://www.apollographql.com/docs/apollo-server/previous-versions/ for more details.

All apollo-server-koa versions · Permanent reference to 2.2.5 · View npm registry JSON · Latest release

Package specifications

Version	2.2.5
License declaration	MIT
Published	2018-11-29T11:46:05.779Z
Node.js requirement	>=6
Type declarations	Bundled declarations
Runtime dependency count	17
Peer requirement count	1
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	56.44 KiB
Published file count	22
Package type	Not declared
ES module entry	Not declared
Default entry	dist/index.js
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	256
Repository stars	Unknown
Repository forks	Unknown

Install apollo-server-koa 2.2.5

npm install apollo-server-koa@2.2.5
pnpm add apollo-server-koa@2.2.5
yarn add apollo-server-koa@2.2.5

Runtime dependencies

koa 2.6.2
accepts ^1.3.5
type-is ^1.6.16
@koa/cors ^2.2.1
@types/koa ^2.0.46
koa-router ^7.4.0
@types/cors ^2.8.4
graphql-tools ^4.0.0
@types/accepts ^1.3.5
koa-bodyparser ^3.0.0
@types/koa__cors ^2.2.1
@types/koa-compose ^3.2.2
apollo-server-core 2.2.5
@types/koa-bodyparser ^5.0.1
graphql-subscriptions ^1.0.0
@apollographql/apollo-upload-server ^5.0.3
@apollographql/graphql-playground-html ^1.6.6

Peer requirements

graphql ^0.12.0 || ^0.13.0 || ^14.0.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@apollographql/apollo-upload-server@5.0.3 — direct
@apollographql/graphql-playground-html@1.6.29 — direct
@koa/cors@2.2.3 — direct
@types/accepts@1.3.7 — direct
@types/cors@2.8.19 — direct
@types/koa@2.15.2 — direct
@types/koa-bodyparser@5.0.2 — direct
@types/koa-compose@3.2.9 — direct
@types/koa__cors@2.2.3 — direct
accepts@1.3.8 — direct
apollo-server-core@2.2.5 — direct
graphql-subscriptions@1.2.1 — direct
graphql-tools@4.0.8 — direct
koa@2.6.2 — direct
koa-bodyparser@3.2.0 — direct
koa-router@7.4.0 — direct
type-is@1.6.18 — direct
@babel/runtime-corejs2@7.29.7 — indirect
busboy@0.2.14 — indirect
object-path@0.11.8 — indirect
xss@1.0.17 — indirect
vary@1.1.2 — indirect
@types/node@26.6.6 — indirect
@types/content-disposition@0.5.9 — indirect
@types/cookies@0.9.2 — indirect
@types/http-assert@1.5.6 — indirect
@types/http-errors@2.0.5 — indirect
@types/keygrip@1.0.6 — indirect
mime-types@2.1.35 — indirect
negotiator@0.6.3 — indirect
@apollographql/apollo-tools@0.2.9 — indirect
@types/ws@6.0.4 — indirect
apollo-cache-control@0.3.3 — indirect
apollo-datasource@0.2.1 — indirect
apollo-engine-reporting@0.1.3 — indirect
apollo-server-caching@0.2.1 — indirect
apollo-server-env@2.2.0 — indirect
apollo-server-errors@2.2.0 — indirect
apollo-server-plugin-base@0.1.5 — indirect
apollo-tracing@0.3.3 — indirect
graphql-extensions@0.3.5 — indirect
graphql-tag@2.12.7 — indirect
json-stable-stringify@1.3.0 — indirect
lodash@4.18.1 — indirect
subscriptions-transport-ws@0.9.19 — indirect
ws@6.2.6 — indirect
iterall@1.3.0 — indirect
apollo-link@1.2.14 — indirect
apollo-utilities@1.3.4 — indirect
deprecated-decorator@0.1.6 — indirect
uuid@3.4.0 — indirect
cache-content-type@1.0.1 — indirect
content-disposition@0.5.4 — indirect
content-type@1.0.5 — indirect
cookies@0.7.3 — indirect
debug@3.1.0 — indirect
delegates@1.0.0 — indirect
depd@1.1.2 — indirect
destroy@1.2.0 — indirect
error-inject@1.0.0 — indirect
escape-html@1.0.3 — indirect
fresh@0.5.2 — indirect
http-assert@1.5.0 — indirect
http-errors@1.8.1 — indirect
is-generator-function@1.1.2 — indirect
koa-compose@4.1.0 — indirect
koa-convert@1.2.0 — indirect
koa-is-json@1.0.0 — indirect
on-finished@2.4.2 — indirect
only@0.0.2 — indirect
parseurl@1.3.3 — indirect
statuses@1.5.0 — indirect
co-body@4.2.0 — indirect
koa-compose@3.2.1 — indirect
methods@1.1.2 — indirect
path-to-regexp@1.9.0 — indirect
urijs@1.19.11 — indirect
media-typer@0.3.0 — indirect
core-js@2.6.12 — indirect
dicer@0.2.5 — indirect
readable-stream@1.1.14 — indirect
commander@2.20.3 — indirect
cssfilter@0.0.10 — indirect
undici-types@8.9.0 — indirect
@types/connect@3.4.38 — indirect
@types/express@5.0.6 — indirect
mime-db@1.52.0 — indirect
apollo-env@0.2.5 — indirect
graphql-extensions@0.3.3 — indirect
apollo-engine-reporting-protobuf@0.1.0 — indirect
async-retry@1.3.3 — indirect
graphql-extensions@0.3.3 — indirect
lru-cache@5.1.1 — indirect
node-fetch@2.7.0 — indirect
util.promisify@1.1.3 — indirect
graphql-extensions@0.3.3 — indirect
tslib@2.9.1 — indirect
call-bind@1.0.9 — indirect
call-bound@1.0.4 — indirect
isarray@2.0.5 — indirect
jsonify@0.0.1 — indirect
object-keys@1.1.1 — indirect
backo2@1.0.2 — indirect
eventemitter3@3.1.2 — indirect
symbol-observable@1.2.0 — indirect
async-limiter@1.0.1 — indirect
ts-invariant@0.4.4 — indirect
tslib@1.14.1 — indirect
zen-observable-ts@0.8.21 — indirect
@wry/equality@0.1.11 — indirect
fast-json-stable-stringify@2.1.0 — indirect
tslib@1.14.1 — indirect
ylru@1.4.0 — indirect
safe-buffer@5.2.1 — indirect
keygrip@1.0.3 — indirect
ms@2.0.0 — indirect
deep-equal@1.0.1 — indirect
inherits@2.0.4 — indirect
setprototypeof@1.2.0 — indirect
toidentifier@1.0.1 — indirect
generator-function@2.0.1 — indirect
get-proto@1.0.1 — indirect
has-tostringtag@1.0.2 — indirect
safe-regex-test@1.1.0 — indirect
co@4.6.0 — indirect
koa-compose@3.2.1 — indirect
ee-first@1.1.1 — indirect
inflation@2.0.0 — indirect
qs@4.0.0 — indirect
raw-body@2.1.7 — indirect
any-promise@1.3.0 — indirect
isarray@0.0.1 — indirect
streamsearch@0.1.2 — indirect
core-util-is@1.0.3 — indirect
string_decoder@0.10.31 — indirect
@types/body-parser@1.19.6 — indirect
@types/express-serve-static-core@5.1.3 — indirect
@types/serve-static@2.2.0 — indirect
core-js@3.51.0 — indirect
protobufjs@6.11.6 — indirect
retry@0.13.1 — indirect
yallist@3.1.1 — indirect
whatwg-url@5.0.0 — indirect
define-data-property@1.1.4 — indirect
define-properties@1.2.1 — indirect
es-errors@1.3.0 — indirect
es-object-atoms@1.1.2 — indirect
for-each@0.3.5 — indirect
get-intrinsic@1.3.1 — indirect
has-proto@1.2.0 — indirect
has-symbols@1.1.0 — indirect
object.getownpropertydescriptors@2.1.9 — indirect
safe-array-concat@1.1.4 — indirect
call-bind-apply-helpers@1.0.2 — indirect
es-define-property@1.0.1 — indirect
set-function-length@1.2.2 — indirect
tslib@1.14.1 — indirect
tslib@1.14.1 — indirect
zen-observable@0.8.15 — indirect
tslib@1.14.1 — indirect
dunder-proto@1.0.1 — indirect
is-regex@1.2.1 — indirect
bytes@2.4.0 — indirect
iconv-lite@0.4.13 — indirect
unpipe@1.0.0 — indirect
@types/qs@6.15.1 — indirect
@types/range-parser@1.2.7 — indirect
@types/send@1.2.1 — indirect
@protobufjs/aspromise@1.1.2 — indirect
@protobufjs/base64@1.1.2 — indirect
@protobufjs/codegen@2.0.5 — indirect
@protobufjs/eventemitter@1.1.1 — indirect
@protobufjs/fetch@1.1.1 — indirect
@protobufjs/float@1.0.2 — indirect
@protobufjs/inquire@1.1.2 — indirect
@protobufjs/path@1.1.2 — indirect
@protobufjs/pool@1.1.0 — indirect
@protobufjs/utf8@1.1.2 — indirect
@types/long@4.0.2 — indirect
long@4.0.0 — indirect
tr46@0.0.3 — indirect
webidl-conversions@3.0.1 — indirect
gopd@1.2.0 — indirect
has-property-descriptors@1.0.2 — indirect
is-callable@1.2.7 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
function-bind@1.1.2 — indirect
hasown@2.0.4 — indirect
math-intrinsics@1.1.0 — indirect
array.prototype.reduce@1.0.8 — indirect
es-abstract@1.24.2 — indirect
isarray@2.0.5 — indirect
es-array-method-boxes-properly@1.0.0 — indirect
is-string@1.1.1 — indirect
array-buffer-byte-length@1.0.2 — indirect
arraybuffer.prototype.slice@1.0.4 — indirect
available-typed-arrays@1.0.7 — indirect
data-view-buffer@1.0.2 — indirect
data-view-byte-length@1.0.2 — indirect
data-view-byte-offset@1.0.1 — indirect
es-set-tostringtag@2.1.0 — indirect
es-to-primitive@1.3.4 — indirect
function.prototype.name@1.2.0 — indirect
get-symbol-description@1.1.0 — indirect
globalthis@1.0.4 — indirect
internal-slot@1.1.0 — indirect
is-array-buffer@3.0.5 — indirect
is-data-view@1.0.2 — indirect
is-negative-zero@2.0.3 — indirect
is-set@2.0.3 — indirect
is-shared-array-buffer@1.0.4 — indirect
is-typed-array@1.1.15 — indirect
is-weakref@1.1.1 — indirect
object-inspect@1.13.4 — indirect
object.assign@4.1.7 — indirect
own-keys@1.0.2 — indirect
regexp.prototype.flags@1.5.4 — indirect
safe-push-apply@1.0.0 — indirect
set-proto@1.0.0 — indirect
stop-iteration-iterator@1.1.0 — indirect
string.prototype.trim@1.2.11 — indirect
string.prototype.trimend@1.0.10 — indirect
string.prototype.trimstart@1.0.8 — indirect
typed-array-buffer@1.0.3 — indirect
typed-array-byte-length@1.0.3 — indirect
typed-array-byte-offset@1.0.5 — indirect
typed-array-length@1.0.8 — indirect
unbox-primitive@1.1.0 — indirect
which-typed-array@1.1.24 — indirect
possible-typed-array-names@1.1.0 — indirect
es-abstract-get@1.0.0 — indirect
is-date-object@1.1.0 — indirect
is-symbol@1.1.1 — indirect
functions-have-names@1.2.3 — indirect
is-document.all@1.0.0 — indirect
side-channel@1.1.1 — indirect
set-function-name@2.0.2 — indirect
isarray@2.0.5 — indirect
reflect.getprototypeof@1.0.10 — indirect
has-bigints@1.1.0 — indirect
which-boxed-primitive@1.1.1 — indirect
side-channel-list@1.0.1 — indirect
side-channel-map@1.0.1 — indirect
side-channel-weakmap@1.0.2 — indirect
which-builtin-type@1.2.1 — indirect
is-bigint@1.1.0 — indirect
is-boolean-object@1.2.2 — indirect
is-number-object@1.1.1 — indirect
is-async-function@2.1.1 — indirect
is-finalizationregistry@1.1.1 — indirect
isarray@2.0.5 — indirect
which-collection@1.0.2 — indirect
is-map@2.0.3 — indirect
is-weakmap@2.0.2 — indirect
is-weakset@2.0.4 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-w42g-7vfc-xf37

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-01T16:15:45.374Z
https://api.deps.dev/v3/systems/npm/packages/apollo-server-koa/versions/2.2.5 — retrieved 2026-11-01T16:15:46.428Z
https://api.deps.dev/v3/systems/npm/packages/apollo-server-koa/versions/2.2.5:dependencies — retrieved 2026-11-01T16:15:46.445Z