bower 1.5.1

The browser package manager

bower@1.5.1 was published on 2015-08-23. Its manifest declares 45 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.10.0.

Deprecated: This Bower version has SECURITY BUG THAT ALLOWS TO WRITE TO ARBITRARY FILE ON YOUR COMPUTER when you install malicious package. Please upgrade Bower to at least version 1.8.8 if you don't want to get hacked. More info: https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction/

All bower versions · Permanent reference to 1.5.1 · Latest release

Package specifications

Version	1.5.1
License declaration	MIT
Published	2015-08-23T14:38:19.195Z
Node.js requirement	>=0.10.0
Type declarations	Not declared
Runtime dependency count	45
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	lib
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	356
Repository stars	Unknown
Repository forks	Unknown

Install bower 1.5.1

npm install bower@1.5.1
pnpm add bower@1.5.1
yarn add bower@1.5.1

Runtime dependencies

q ^1.1.2
opn ^1.0.1
tmp 0.0.24
glob ^4.3.2
junk ^1.0.0
mout ^0.11.0
nopt ^3.0.1
archy 1.0.0
chalk ^1.0.0
retry 0.6.1
which ^1.0.8
abbrev ^1.0.5
chmodr 0.1.0
github ^0.2.3
mkdirp 0.5.0
rimraf ^2.2.8
semver ^5.0.1
tar-fs ^1.4.1
fstream ^1.0.3
insight ^0.5.0
is-root ^1.0.0
request 2.53.0
cardinal 0.4.4
inquirer 0.8.0
lockfile ^1.0.0
promptly 0.2.0
lru-cache ^2.5.0
user-home ^1.1.0
bower-json ^0.4.0
handlebars ^2.0.0
configstore ^0.3.2
findup-sync ^0.2.1
graceful-fs ^3.0.5
p-throttler 0.1.1
shell-quote ^1.4.2
bower-config ^0.6.1
bower-logger ^0.2.2
decompress-zip ^0.1.0
fstream-ignore ^1.0.2
update-notifier ^0.3.0
deep-sort-object ~0.1.1
request-progress 0.3.1
stringify-object ^1.0.0
bower-endpoint-parser ^0.2.2
bower-registry-client ^0.3.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

abbrev@1.1.1 — direct
archy@1.0.0 — direct
bower-config@0.6.2 — direct
bower-endpoint-parser@0.2.2 — direct
bower-json@0.4.0 — direct
bower-logger@0.2.2 — direct
bower-registry-client@0.3.0 — direct
cardinal@0.4.4 — direct
chalk@1.1.3 — direct
chmodr@0.1.0 — direct
configstore@0.3.2 — direct
decompress-zip@0.1.0 — direct
deep-sort-object@0.1.1 — direct
findup-sync@0.2.1 — direct
fstream@1.0.12 — direct
fstream-ignore@1.0.5 — direct
github@0.2.4 — direct
glob@4.5.3 — direct
graceful-fs@3.0.12 — direct
handlebars@2.0.0 — direct
inquirer@0.8.0 — direct
insight@0.5.3 — direct
is-root@1.0.0 — direct
junk@1.0.3 — direct
lockfile@1.0.4 — direct
lru-cache@2.7.3 — direct
mkdirp@0.5.0 — direct
mout@0.11.1 — direct
nopt@3.0.6 — direct
opn@1.0.2 — direct
p-throttler@0.1.1 — direct
promptly@0.2.0 — direct
q@1.5.1 — direct
request@2.53.0 — direct
request-progress@0.3.1 — direct
retry@0.6.1 — direct
rimraf@2.7.1 — direct
semver@5.7.2 — direct
shell-quote@1.12.0 — direct
stringify-object@1.0.1 — direct
tar-fs@1.16.6 — direct
tmp@0.0.24 — direct
update-notifier@0.3.2 — direct
user-home@1.1.1 — direct
which@1.3.1 — direct
graceful-fs@2.0.3 — indirect
mout@0.9.1 — indirect
optimist@0.6.1 — indirect
osenv@0.0.3 — indirect
deep-extend@0.2.11 — indirect
graceful-fs@2.0.3 — indirect
intersect@0.0.3 — indirect
async@0.2.10 — indirect
graceful-fs@2.0.3 — indirect
lru-cache@2.3.1 — indirect
mkdirp@0.3.5 — indirect
request@2.51.0 — indirect
request-replay@0.2.0 — indirect
rimraf@2.2.8 — indirect
ansicolors@0.2.1 — indirect
redeyed@0.4.4 — indirect
ansi-styles@2.2.1 — indirect
escape-string-regexp@1.0.5 — indirect
has-ansi@2.0.0 — indirect
strip-ansi@3.0.1 — indirect
supports-color@2.0.0 — indirect
js-yaml@3.15.2 — indirect
object-assign@2.1.1 — indirect
osenv@0.1.5 — indirect
uuid@2.0.3 — indirect
xdg-basedir@1.0.1 — indirect
binary@0.3.0 — indirect
mkpath@0.1.0 — indirect
readable-stream@1.1.14 — indirect
touch@0.0.3 — indirect
mout@0.9.1 — indirect
glob@4.3.5 — indirect
graceful-fs@4.2.11 — indirect
inherits@2.0.4 — indirect
minimatch@3.1.5 — indirect
mime@1.6.0 — indirect
inflight@1.0.6 — indirect
minimatch@2.0.10 — indirect
once@1.4.0 — indirect
natives@1.1.6 — indirect
optimist@0.3.7 — indirect
uglify-js@2.3.6 — indirect
ansi-regex@1.1.1 — indirect
chalk@0.5.1 — indirect
cli-color@0.3.3 — indirect
figures@1.7.0 — indirect
lodash@2.4.2 — indirect
mute-stream@0.0.4 — indirect
readline2@0.1.1 — indirect
rx@2.5.3 — indirect
through@2.3.8 — indirect
async@0.9.2 — indirect
lodash.debounce@3.1.1 — indirect
os-name@1.0.3 — indirect
tough-cookie@0.12.1 — indirect
signal-exit@3.0.7 — indirect
minimist@0.0.8 — indirect
q@0.9.7 — indirect
read@1.0.7 — indirect
aws-sign2@0.5.0 — indirect
bl@0.9.5 — indirect
caseless@0.9.0 — indirect
combined-stream@0.0.7 — indirect
forever-agent@0.5.2 — indirect
form-data@0.2.0 — indirect
hawk@2.3.1 — indirect
http-signature@0.10.1 — indirect
isstream@0.1.2 — indirect
json-stringify-safe@5.0.1 — indirect
mime-types@2.0.14 — indirect
node-uuid@1.4.8 — indirect
oauth-sign@0.6.0 — indirect
qs@2.3.3 — indirect
stringstream@0.0.6 — indirect
tough-cookie@6.0.2 — indirect
tunnel-agent@0.4.3 — indirect
throttleit@0.0.2 — indirect
glob@7.2.3 — indirect
chownr@1.1.4 — indirect
mkdirp@0.5.6 — indirect
pump@1.0.3 — indirect
tar-stream@1.6.2 — indirect
is-npm@1.0.0 — indirect
latest-version@1.0.1 — indirect
semver-diff@2.1.0 — indirect
string-length@1.0.1 — indirect
isexe@2.0.0 — indirect
minimist@0.0.10 — indirect
wordwrap@0.0.3 — indirect
caseless@0.8.0 — indirect
hawk@1.1.1 — indirect
mime-types@1.0.2 — indirect
oauth-sign@0.5.0 — indirect
esprima@1.0.4 — indirect
ansi-regex@2.1.1 — indirect
argparse@1.0.10 — indirect
esprima@4.0.1 — indirect
os-homedir@1.0.2 — indirect
os-tmpdir@1.0.2 — indirect
buffers@0.1.1 — indirect
chainsaw@0.1.0 — indirect
core-util-is@1.0.3 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
nopt@1.0.10 — indirect
brace-expansion@1.1.21 — indirect
wrappy@1.0.2 — indirect
optimist@0.3.7 — indirect
source-map@0.1.43 — indirect
ansi-styles@1.1.0 — indirect
has-ansi@0.1.0 — indirect
strip-ansi@0.3.0 — indirect
supports-color@0.2.0 — indirect
d@0.1.1 — indirect
es5-ext@0.10.64 — indirect
memoizee@0.3.10 — indirect
timers-ext@0.1.8 — indirect
object-assign@4.1.1 — indirect
strip-ansi@2.0.1 — indirect
lodash._getnative@3.9.1 — indirect
osx-release@1.1.0 — indirect
win-release@1.1.1 — indirect
punycode@2.3.1 — indirect
readable-stream@1.0.34 — indirect
delayed-stream@0.0.5 — indirect
async@0.9.2 — indirect
mime-types@2.0.14 — indirect
boom@2.10.1 — indirect
cryptiles@2.0.5 — indirect
hoek@2.16.3 — indirect
sntp@1.0.9 — indirect
asn1@0.1.11 — indirect
assert-plus@0.1.5 — indirect
ctype@0.5.3 — indirect
mime-db@1.12.0 — indirect
tldts@7.4.19 — indirect
fs.realpath@1.0.0 — indirect
minimatch@3.1.5 — indirect
path-is-absolute@1.0.1 — indirect
minimist@1.2.8 — indirect
end-of-stream@1.4.5 — indirect
bl@1.2.3 — indirect
buffer-alloc@1.2.0 — indirect
fs-constants@1.0.0 — indirect
readable-stream@2.3.8 — indirect
to-buffer@1.2.2 — indirect
xtend@4.0.2 — indirect
package-json@1.2.0 — indirect
boom@0.4.2 — indirect
cryptiles@0.2.2 — indirect
hoek@0.9.1 — indirect
sntp@0.2.4 — indirect
sprintf-js@1.0.3 — indirect
traverse@0.3.10 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
amdefine@1.0.1 — indirect
ansi-regex@0.2.1 — indirect
ansi-regex@0.2.1 — indirect
es6-iterator@2.0.3 — indirect
es6-symbol@3.1.4 — indirect
esniff@2.0.1 — indirect
next-tick@1.1.0 — indirect
es6-weak-map@0.1.4 — indirect
event-emitter@0.3.5 — indirect
lru-queue@0.1.0 — indirect
next-tick@0.2.2 — indirect
ansi-regex@1.1.1 — indirect
minimist@1.2.8 — indirect
tldts-core@7.4.19 — indirect
safe-buffer@5.2.1 — indirect
buffer-alloc-unsafe@1.1.0 — indirect
buffer-fill@1.0.0 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
isarray@2.0.5 — indirect
typed-array-buffer@1.0.3 — indirect
got@3.3.1 — indirect
registry-url@3.1.0 — indirect
define-data-property@1.1.4 — indirect
es-to-primitive@1.3.4 — indirect
gopd@1.2.0 — indirect
typedarray.prototype.slice@1.0.6 — indirect
which-typed-array@1.1.24 — indirect
d@1.0.2 — indirect
d@1.0.2 — indirect
ext@1.7.0 — indirect
d@1.0.2 — indirect
type@2.7.3 — indirect
es6-iterator@0.1.3 — indirect
es6-symbol@2.0.1 — indirect
d@1.0.2 — indirect
safe-buffer@5.1.2 — indirect
call-bound@1.0.4 — indirect
es-errors@1.3.0 — indirect
is-typed-array@1.1.15 — indirect
duplexify@3.7.1 — indirect
infinity-agent@2.0.3 — indirect
is-redirect@1.0.0 — indirect
is-stream@1.1.0 — indirect
lowercase-keys@1.0.1 — indirect
nested-error-stacks@1.0.2 — indirect
object-assign@3.0.0 — indirect
prepend-http@1.0.4 — indirect
read-all-stream@3.1.0 — indirect
timed-out@2.0.0 — indirect
rc@1.2.8 — indirect
es-define-property@1.0.1 — indirect
es-abstract-get@1.0.0 — indirect
is-callable@1.2.7 — indirect
is-date-object@1.1.0 — indirect
is-symbol@1.1.1 — indirect
call-bind@1.0.9 — indirect
define-properties@1.2.1 — indirect
es-abstract@1.24.2 — indirect
get-proto@1.0.1 — indirect
math-intrinsics@1.1.0 — indirect
typed-array-byte-offset@1.0.5 — indirect
available-typed-arrays@1.0.7 — indirect
for-each@0.3.5 — indirect
has-tostringtag@1.0.2 — indirect
call-bind-apply-helpers@1.0.2 — indirect
get-intrinsic@1.3.1 — indirect
readable-stream@2.3.8 — indirect
stream-shift@1.0.3 — indirect
pinkie-promise@2.0.1 — indirect
readable-stream@2.3.8 — indirect
deep-extend@0.6.0 — indirect
ini@1.3.8 — indirect
minimist@1.2.8 — indirect
strip-json-comments@2.0.1 — indirect
es-object-atoms@1.1.2 — indirect
object-inspect@1.13.4 — indirect
has-symbols@1.1.0 — indirect
safe-regex-test@1.1.0 — indirect
set-function-length@1.2.2 — indirect
has-property-descriptors@1.0.2 — indirect
object-keys@1.1.1 — indirect
array-buffer-byte-length@1.0.2 — indirect
arraybuffer.prototype.slice@1.0.4 — indirect
data-view-buffer@1.0.2 — indirect
data-view-byte-length@1.0.2 — indirect
data-view-byte-offset@1.0.1 — indirect
es-set-tostringtag@2.1.0 — indirect
function.prototype.name@1.2.0 — indirect
get-symbol-description@1.1.0 — indirect
globalthis@1.0.4 — indirect
has-proto@1.2.0 — indirect
hasown@2.0.4 — indirect
internal-slot@1.1.0 — indirect
is-array-buffer@3.0.5 — indirect
is-data-view@1.0.2 — indirect
is-negative-zero@2.0.3 — indirect
is-regex@1.2.1 — indirect
is-set@2.0.3 — indirect
is-shared-array-buffer@1.0.4 — indirect
is-string@1.1.1 — indirect
is-weakref@1.1.1 — indirect
object.assign@4.1.7 — indirect
own-keys@1.0.2 — indirect
regexp.prototype.flags@1.5.4 — indirect
safe-array-concat@1.1.4 — indirect
safe-push-apply@1.0.0 — indirect
set-proto@1.0.0 — indirect
stop-iteration-iterator@1.1.0 — indirect
string.prototype.trim@1.2.11 — indirect
string.prototype.trimend@1.0.10 — indirect
string.prototype.trimstart@1.0.8 — indirect
typed-array-byte-length@1.0.3 — indirect
typed-array-length@1.0.8 — indirect
unbox-primitive@1.1.0 — indirect
dunder-proto@1.0.1 — indirect
reflect.getprototypeof@1.0.10 — indirect
possible-typed-array-names@1.1.0 — indirect
function-bind@1.1.2 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
generator-function@2.0.1 — indirect
isarray@1.0.0 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
pinkie@2.0.4 — indirect
isarray@1.0.0 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
functions-have-names@1.2.3 — indirect
is-document.all@1.0.0 — indirect
side-channel@1.1.1 — indirect
set-function-name@2.0.2 — indirect
isarray@2.0.5 — indirect
isarray@2.0.5 — indirect
has-bigints@1.1.0 — indirect
which-boxed-primitive@1.1.1 — indirect
which-builtin-type@1.2.1 — indirect
side-channel-list@1.0.1 — indirect
side-channel-map@1.0.1 — indirect
side-channel-weakmap@1.0.2 — indirect
is-bigint@1.1.0 — indirect
is-boolean-object@1.2.2 — indirect
is-number-object@1.1.1 — indirect
is-async-function@2.1.1 — indirect
is-finalizationregistry@1.1.1 — indirect
is-generator-function@1.1.2 — indirect
isarray@2.0.5 — indirect
which-collection@1.0.2 — indirect
is-map@2.0.3 — indirect
is-weakmap@2.0.2 — indirect
is-weakset@2.0.4 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-p6mr-pxg4-68hx

Evidence and freshness

https://registry.npmjs.org/bower/1.5.1 — retrieved 2026-10-29T16:21:50.586Z
https://api.deps.dev/v3/systems/npm/packages/bower/versions/1.5.1 — retrieved 2026-10-29T16:21:51.390Z
https://api.deps.dev/v3/systems/npm/packages/bower/versions/1.5.1:dependencies — retrieved 2026-10-29T16:21:51.431Z