bower 1.1.1

The browser package manager.

bower@1.1.1 was published on 2013-08-08. Its manifest declares 36 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.8.0.

Deprecated: This Bower version has SECURITY BUG THAT ALLOWS TO WRITE TO ARBITRARY FILE ON YOUR COMPUTER when you install malicious package. Please upgrade Bower to at least version 1.8.8 if you don't want to get hacked. More info: https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction/

All bower versions · Permanent reference to 1.1.1 · Latest release

Package specifications

Version	1.1.1
License declaration	Not declared
Published	2013-08-08T13:14:56.837Z
Node.js requirement	>=0.8.0
Type declarations	Not declared
Runtime dependency count	36
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	lib
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	273
Repository stars	Unknown
Repository forks	Unknown

Install bower 1.1.1

npm install bower@1.1.1
pnpm add bower@1.1.1
yarn add bower@1.1.1

Runtime dependencies

q ~0.9.2
tar ~0.1.17
tmp ~0.0.20
glob ~3.2.1
junk ~0.2.0
mout ~0.6.0
nopt ~2.1.1
open ~0.0.3
archy 0.0.2
chalk ~0.2.0
retry ~0.6.0
unzip ~0.1.7
which ~1.0.5
abbrev ~1.0.4
chmodr ~0.1.0
mkdirp ~0.3.5
rimraf ~2.2.0
semver ~2.1.0
fstream ~0.1.22
request ~2.25.0
cardinal ~0.4.0
inquirer ~0.2.2
promptly ~0.2.0
lru-cache ~2.3.0
bower-json ~0.3.0
handlebars ~1.0.11
sudo-block ~0.2.0
graceful-fs ~2.0.0
bower-config ~0.3.0
bower-logger ~0.1.0
fstream-ignore ~0.0.6
update-notifier ~0.1.3
request-progress ~0.2.0
stringify-object ~0.1.4
bower-endpoint-parser ~0.2.0
bower-registry-client ~0.1.2

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

abbrev@1.0.9 — direct
archy@0.0.2 — direct
bower-config@0.3.5 — direct
bower-endpoint-parser@0.2.2 — direct
bower-json@0.3.0 — direct
bower-logger@0.1.0 — direct
bower-registry-client@0.1.6 — direct
cardinal@0.4.4 — direct
chalk@0.2.1 — direct
chmodr@0.1.2 — direct
fstream@0.1.31 — direct
fstream-ignore@0.0.10 — direct
glob@3.2.11 — direct
graceful-fs@2.0.3 — direct
handlebars@1.0.12 — direct
inquirer@0.2.5 — direct
junk@0.2.2 — direct
lru-cache@2.3.1 — direct
mkdirp@0.3.5 — direct
mout@0.6.0 — direct
nopt@2.1.2 — direct
open@0.0.5 — direct
promptly@0.2.1 — direct
q@0.9.7 — direct
request@2.25.0 — direct
request-progress@0.2.3 — direct
retry@0.6.1 — direct
rimraf@2.2.8 — direct
semver@2.1.0 — direct
stringify-object@0.1.8 — direct
sudo-block@0.2.1 — direct
tar@0.1.20 — direct
tmp@0.0.33 — direct
unzip@0.1.11 — direct
update-notifier@0.1.10 — direct
which@1.0.9 — direct
optimist@0.6.1 — indirect
osenv@0.0.3 — indirect
deep-extend@0.2.11 — indirect
async@0.2.10 — indirect
bower-config@0.4.5 — indirect
request@2.27.0 — indirect
request-replay@0.2.0 — indirect
ansicolors@0.2.1 — indirect
redeyed@0.4.4 — indirect
ansi-styles@0.2.0 — indirect
has-color@0.1.7 — indirect
graceful-fs@3.0.12 — indirect
inherits@2.0.4 — indirect
mkdirp@0.5.6 — indirect
minimatch@0.3.0 — indirect
optimist@0.3.7 — indirect
uglify-js@2.3.6 — indirect
cli-color@0.2.3 — indirect
lodash@1.2.1 — indirect
mute-stream@0.0.3 — indirect
read@1.0.7 — indirect
aws-sign@0.3.0 — indirect
cookie-jar@0.3.0 — indirect
forever-agent@0.5.2 — indirect
form-data@0.1.4 — indirect
hawk@1.0.0 — indirect
http-signature@0.10.1 — indirect
json-stringify-safe@5.0.1 — indirect
mime@1.2.11 — indirect
node-uuid@1.4.8 — indirect
oauth-sign@0.3.0 — indirect
qs@0.6.6 — indirect
tunnel-agent@0.3.0 — indirect
throttleit@0.0.2 — indirect
chalk@0.1.1 — indirect
block-stream@0.0.9 — indirect
os-tmpdir@1.0.2 — indirect
binary@0.3.0 — indirect
match-stream@0.0.2 — indirect
pullstream@0.4.1 — indirect
readable-stream@1.0.34 — indirect
setimmediate@1.0.5 — indirect
chalk@0.4.0 — indirect
configstore@0.3.2 — indirect
request@2.88.2 — indirect
semver@2.3.2 — indirect
minimist@0.0.10 — indirect
wordwrap@0.0.3 — indirect
esprima@1.0.4 — indirect
natives@1.1.6 — indirect
minimist@1.2.8 — indirect
sigmund@1.0.1 — indirect
optimist@0.3.7 — indirect
source-map@0.1.43 — indirect
es5-ext@0.9.2 — indirect
memoizee@0.2.6 — indirect
mute-stream@0.0.8 — indirect
async@0.9.2 — indirect
combined-stream@0.0.7 — indirect
boom@0.4.2 — indirect
cryptiles@0.2.2 — indirect
hoek@0.9.1 — indirect
sntp@0.2.4 — indirect
asn1@0.1.11 — indirect
assert-plus@0.1.5 — indirect
ctype@0.5.3 — indirect
ansi-styles@0.1.2 — indirect
buffers@0.1.1 — indirect
chainsaw@0.1.0 — indirect
over@0.0.5 — indirect
slice-stream@1.0.0 — indirect
core-util-is@1.0.3 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
ansi-styles@1.0.0 — indirect
strip-ansi@0.1.1 — indirect
graceful-fs@3.0.12 — indirect
js-yaml@3.15.2 — indirect
mkdirp@0.5.6 — indirect
object-assign@2.1.1 — indirect
osenv@0.1.5 — indirect
user-home@1.1.1 — indirect
uuid@2.0.3 — indirect
xdg-basedir@1.0.1 — indirect
aws-sign2@0.7.0 — indirect
aws4@1.13.2 — indirect
caseless@0.12.0 — indirect
combined-stream@1.0.8 — indirect
extend@3.0.2 — indirect
forever-agent@0.6.1 — indirect
form-data@2.3.3 — indirect
har-validator@5.1.5 — indirect
http-signature@1.2.0 — indirect
is-typedarray@1.0.0 — indirect
isstream@0.1.2 — indirect
mime-types@2.1.35 — indirect
oauth-sign@0.9.0 — indirect
performance-now@2.1.0 — indirect
qs@6.5.5 — indirect
safe-buffer@5.2.1 — indirect
tough-cookie@2.5.0 — indirect
tunnel-agent@0.6.0 — indirect
uuid@3.4.0 — indirect
amdefine@1.0.1 — indirect
event-emitter@0.2.2 — indirect
next-tick@0.1.0 — indirect
delayed-stream@0.0.5 — indirect
traverse@0.3.10 — indirect
argparse@1.0.10 — indirect
esprima@4.0.1 — indirect
minimist@1.2.8 — indirect
os-homedir@1.0.2 — indirect
delayed-stream@1.0.0 — indirect
asynckit@0.4.0 — indirect
ajv@6.15.0 — indirect
har-schema@2.0.0 — indirect
assert-plus@1.0.0 — indirect
jsprim@1.4.2 — indirect
sshpk@1.18.0 — indirect
mime-db@1.52.0 — indirect
psl@1.15.0 — indirect
punycode@2.3.1 — indirect
define-data-property@1.1.4 — indirect
es-to-primitive@1.3.4 — indirect
gopd@1.2.0 — indirect
typedarray.prototype.slice@1.0.6 — indirect
which-typed-array@1.1.24 — indirect
sprintf-js@1.0.3 — indirect
fast-deep-equal@3.1.3 — indirect
fast-json-stable-stringify@2.1.0 — indirect
json-schema-traverse@0.4.1 — indirect
uri-js@4.4.1 — indirect
assert-plus@1.0.0 — indirect
extsprintf@1.3.0 — indirect
json-schema@0.4.0 — indirect
verror@1.10.0 — indirect
asn1@0.2.6 — indirect
assert-plus@1.0.0 — indirect
bcrypt-pbkdf@1.0.2 — indirect
dashdash@1.14.1 — indirect
ecc-jsbn@0.1.2 — indirect
getpass@0.1.7 — indirect
jsbn@0.1.1 — indirect
safer-buffer@2.1.2 — indirect
tweetnacl@0.14.5 — indirect
es-define-property@1.0.1 — indirect
es-errors@1.3.0 — indirect
es-abstract-get@1.0.0 — indirect
is-callable@1.2.7 — indirect
is-date-object@1.1.0 — indirect
is-symbol@1.1.1 — indirect
call-bind@1.0.9 — indirect
define-properties@1.2.1 — indirect
es-abstract@1.24.2 — indirect
get-proto@1.0.1 — indirect
math-intrinsics@1.1.0 — indirect
typed-array-buffer@1.0.3 — indirect
typed-array-byte-offset@1.0.5 — indirect
available-typed-arrays@1.0.7 — indirect
call-bound@1.0.4 — indirect
for-each@0.3.5 — indirect
has-tostringtag@1.0.2 — indirect
assert-plus@1.0.0 — indirect
core-util-is@1.0.2 — indirect
assert-plus@1.0.0 — indirect
assert-plus@1.0.0 — indirect
es-object-atoms@1.1.2 — indirect
object-inspect@1.13.4 — indirect
has-symbols@1.1.0 — indirect
safe-regex-test@1.1.0 — indirect
call-bind-apply-helpers@1.0.2 — indirect
get-intrinsic@1.3.1 — indirect
set-function-length@1.2.2 — indirect
has-property-descriptors@1.0.2 — indirect
object-keys@1.1.1 — indirect
array-buffer-byte-length@1.0.2 — indirect
arraybuffer.prototype.slice@1.0.4 — indirect
data-view-buffer@1.0.2 — indirect
data-view-byte-length@1.0.2 — indirect
data-view-byte-offset@1.0.1 — indirect
es-set-tostringtag@2.1.0 — indirect
function.prototype.name@1.2.0 — indirect
get-symbol-description@1.1.0 — indirect
globalthis@1.0.4 — indirect
has-proto@1.2.0 — indirect
hasown@2.0.4 — indirect
internal-slot@1.1.0 — indirect
is-array-buffer@3.0.5 — indirect
is-data-view@1.0.2 — indirect
is-negative-zero@2.0.3 — indirect
is-regex@1.2.1 — indirect
is-set@2.0.3 — indirect
is-shared-array-buffer@1.0.4 — indirect
is-string@1.1.1 — indirect
is-typed-array@1.1.15 — indirect
is-weakref@1.1.1 — indirect
object.assign@4.1.7 — indirect
own-keys@1.0.2 — indirect
regexp.prototype.flags@1.5.4 — indirect
safe-array-concat@1.1.4 — indirect
safe-push-apply@1.0.0 — indirect
set-proto@1.0.0 — indirect
stop-iteration-iterator@1.1.0 — indirect
string.prototype.trim@1.2.11 — indirect
string.prototype.trimend@1.0.10 — indirect
string.prototype.trimstart@1.0.8 — indirect
typed-array-byte-length@1.0.3 — indirect
typed-array-length@1.0.8 — indirect
unbox-primitive@1.1.0 — indirect
dunder-proto@1.0.1 — indirect
reflect.getprototypeof@1.0.10 — indirect
possible-typed-array-names@1.1.0 — indirect
function-bind@1.1.2 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
generator-function@2.0.1 — indirect
functions-have-names@1.2.3 — indirect
is-document.all@1.0.0 — indirect
side-channel@1.1.1 — indirect
set-function-name@2.0.2 — indirect
isarray@2.0.5 — indirect
has-bigints@1.1.0 — indirect
which-boxed-primitive@1.1.1 — indirect
which-builtin-type@1.2.1 — indirect
side-channel-list@1.0.1 — indirect
side-channel-map@1.0.1 — indirect
side-channel-weakmap@1.0.2 — indirect
is-bigint@1.1.0 — indirect
is-boolean-object@1.2.2 — indirect
is-number-object@1.1.1 — indirect
is-async-function@2.1.1 — indirect
is-finalizationregistry@1.1.1 — indirect
is-generator-function@1.1.2 — indirect
which-collection@1.0.2 — indirect
is-map@2.0.3 — indirect
is-weakmap@2.0.2 — indirect
is-weakset@2.0.4 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-p6mr-pxg4-68hx

Evidence and freshness

https://registry.npmjs.org/bower/1.1.1 — retrieved 2026-10-29T16:08:24.138Z
https://api.deps.dev/v3/systems/npm/packages/bower/versions/1.1.1 — retrieved 2026-10-29T16:08:24.652Z
https://api.deps.dev/v3/systems/npm/packages/bower/versions/1.1.1:dependencies — retrieved 2026-10-29T16:08:24.694Z