browser-sync 1.6.3

Live CSS Reload & Browser Syncing

browser-sync@1.6.3 was published on 2014-11-02. Its manifest declares 22 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >= 0.8.0.

All browser-sync versions · Permanent reference to 1.6.3 · Latest release

Package specifications

Version	1.6.3
License declaration	Not declared
Published	2014-11-02T14:09:37.116Z
Node.js requirement	>= 0.8.0
Type declarations	Not declared
Runtime dependency count	22
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	194
Repository stars	12293
Repository forks	750

Install browser-sync 1.6.3

npm install browser-sync@1.6.3
pnpm add browser-sync@1.6.3
yarn add browser-sync@1.6.3

Runtime dependencies

opn ^1.0.0
foxy ^3.0.0
tfunk ^2.0.2
dev-ip ~0.1.7
lodash ~2.4.1
connect ~3.2.0
minimist ^1.1.0
commander ~2.3.0
socket.io 1.1.0
opt-merger ^1.1.0
eazy-logger 1.4.0
localtunnel ^1.3.0
object-path ^0.6.0
serve-index ^1.1.5
glob-watcher 0.0.6
serve-static ^1.4.2
ua-parser-js ~0.7.0
easy-extender ^2.0.0
resp-modifier ~0.1.2
emitter-steward 0.0.1
portscanner-plus 0.1.0
browser-sync-client 0.4.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

browser-sync-client@0.4.1 — direct
commander@2.3.0 — direct
connect@3.2.0 — direct
dev-ip@0.1.7 — direct
easy-extender@2.3.4 — direct
eazy-logger@1.4.0 — direct
emitter-steward@0.0.1 — direct
foxy@3.1.0 — direct
glob-watcher@0.0.6 — direct
localtunnel@1.9.2 — direct
lodash@2.4.2 — direct
minimist@1.2.8 — direct
object-path@0.6.0 — direct
opn@1.0.2 — direct
opt-merger@1.1.1 — direct
portscanner-plus@0.1.0 — direct
resp-modifier@0.1.2 — direct
serve-index@1.9.2 — direct
serve-static@1.16.3 — direct
socket.io@1.1.0 — direct
tfunk@2.1.0 — direct
ua-parser-js@0.7.41 — direct
debug@2.0.0 — indirect
finalhandler@0.2.0 — indirect
parseurl@1.3.3 — indirect
utils-merge@1.0.0 — indirect
lodash@2.2.1 — indirect
lodash@4.18.1 — indirect
opt-merger@0.2.1 — indirect
http-proxy@1.18.1 — indirect
gaze@0.5.2 — indirect
axios@0.19.0 — indirect
debug@4.1.1 — indirect
openurl@1.1.1 — indirect
yargs@6.6.0 — indirect
lodash@3.10.1 — indirect
portscanner@0.2.3 — indirect
q@1.0.1 — indirect
accepts@1.3.8 — indirect
batch@0.6.1 — indirect
debug@2.6.9 — indirect
escape-html@1.0.3 — indirect
http-errors@1.8.1 — indirect
mime-types@2.1.35 — indirect
encodeurl@2.0.0 — indirect
escape-html@1.0.3 — indirect
send@0.19.2 — indirect
debug@0.7.4 — indirect
engine.io@1.4.0 — indirect
has-binary-data@0.1.3 — indirect
socket.io-adapter@0.2.0 — indirect
socket.io-client@1.1.0 — indirect
socket.io-parser@2.2.1 — indirect
chalk@0.5.1 — indirect
ms@0.6.2 — indirect
escape-html@1.0.1 — indirect
eventemitter3@4.0.7 — indirect
follow-redirects@1.16.2 — indirect
requires-port@1.0.0 — indirect
globule@0.1.0 — indirect
follow-redirects@1.5.10 — indirect
is-buffer@2.0.5 — indirect
ms@2.1.3 — indirect
camelcase@3.0.0 — indirect
cliui@3.2.0 — indirect
decamelize@1.2.0 — indirect
get-caller-file@1.0.3 — indirect
os-locale@1.4.0 — indirect
read-pkg-up@1.0.1 — indirect
require-directory@2.1.1 — indirect
require-main-filename@1.0.1 — indirect
set-blocking@2.0.0 — indirect
string-width@1.0.2 — indirect
which-module@1.0.0 — indirect
y18n@3.2.2 — indirect
yargs-parser@4.2.1 — indirect
async@0.1.15 — indirect
negotiator@0.6.3 — indirect
ms@2.0.0 — indirect
depd@1.1.2 — indirect
inherits@2.0.4 — indirect
setprototypeof@1.2.0 — indirect
statuses@1.5.0 — indirect
toidentifier@1.0.1 — indirect
mime-db@1.52.0 — indirect
debug@2.6.9 — indirect
depd@2.0.0 — indirect
destroy@1.2.0 — indirect
escape-html@1.0.3 — indirect
etag@1.8.1 — indirect
fresh@0.5.2 — indirect
http-errors@2.0.1 — indirect
mime@1.6.0 — indirect
ms@2.1.3 — indirect
on-finished@2.4.2 — indirect
range-parser@1.2.1 — indirect
statuses@2.0.2 — indirect
base64id@0.1.0 — indirect
debug@1.0.3 — indirect
engine.io-parser@1.1.0 — indirect
ws@0.4.31 — indirect
isarray@0.0.1 — indirect
debug@0.7.4 — indirect
socket.io-parser@2.1.2 — indirect
component-bind@1.0.0 — indirect
component-emitter@1.1.2 — indirect
debug@0.7.4 — indirect
engine.io-client@1.4.0 — indirect
has-binary@0.1.5 — indirect
indexof@0.0.1 — indirect
object-component@0.0.3 — indirect
parseuri@0.0.2 — indirect
socket.io-parser@2.2.2 — indirect
to-array@0.1.3 — indirect
benchmark@1.0.0 — indirect
debug@0.7.4 — indirect
json3@3.2.6 — indirect
ansi-styles@1.1.0 — indirect
escape-string-regexp@1.0.5 — indirect
has-ansi@0.1.0 — indirect
strip-ansi@0.3.0 — indirect
supports-color@0.2.0 — indirect
glob@3.1.21 — indirect
lodash@1.0.2 — indirect
minimatch@0.2.14 — indirect
debug@3.1.0 — indirect
strip-ansi@3.0.1 — indirect
wrap-ansi@2.1.0 — indirect
lcid@1.0.0 — indirect
find-up@1.1.2 — indirect
read-pkg@1.1.0 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
strip-ansi@3.0.1 — indirect
ms@2.0.0 — indirect
inherits@2.0.4 — indirect
ee-first@1.1.1 — indirect
after@0.8.1 — indirect
arraybuffer.slice@0.0.6 — indirect
base64-arraybuffer@0.1.2 — indirect
blob@0.0.2 — indirect
utf8@2.0.0 — indirect
commander@0.6.1 — indirect
nan@0.3.2 — indirect
options@0.0.6 — indirect
tinycolor@0.0.1 — indirect
component-inherit@0.0.3 — indirect
debug@0.7.4 — indirect
has-cors@1.0.3 — indirect
parsejson@0.0.1 — indirect
parseqs@0.0.2 — indirect
parseuri@0.0.4 — indirect
better-assert@1.0.2 — indirect
ansi-regex@0.2.1 — indirect
graceful-fs@1.2.3 — indirect
inherits@1.0.2 — indirect
lru-cache@2.7.3 — indirect
sigmund@1.0.1 — indirect
ms@2.0.0 — indirect
ansi-regex@2.1.1 — indirect
strip-ansi@3.0.1 — indirect
invert-kv@1.0.0 — indirect
path-exists@2.1.0 — indirect
pinkie-promise@2.0.1 — indirect
load-json-file@1.1.0 — indirect
normalize-package-data@2.5.0 — indirect
path-type@1.1.0 — indirect
number-is-nan@1.0.1 — indirect
ansi-regex@2.1.1 — indirect
callsite@1.0.0 — indirect
ansi-regex@2.1.1 — indirect
pinkie@2.0.4 — indirect
graceful-fs@4.2.11 — indirect
parse-json@2.2.0 — indirect
pify@2.3.0 — indirect
strip-bom@2.0.0 — indirect
hosted-git-info@2.8.9 — indirect
resolve@1.22.13 — indirect
semver@5.7.2 — indirect
validate-npm-package-license@3.0.4 — indirect
graceful-fs@4.2.11 — indirect
error-ex@1.3.4 — indirect
is-utf8@0.2.1 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
is-arrayish@0.2.1 — indirect
hasown@2.0.4 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
function-bind@1.1.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review	1/10 — Found 2/20 approved changesets -- score normalized to 1
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	2/10 — dependency not pinned by hash detected -- score normalized to 2
Security-Policy	0/10 — security policy file not detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/browser-sync/1.6.3 — retrieved 2026-10-29T15:14:57.624Z
https://api.deps.dev/v3/projects/github.com%2FBrowserSync%2Fbrowser-sync — retrieved 2026-10-29T13:50:26.876Z
https://api.deps.dev/v3/systems/npm/packages/browser-sync/versions/1.6.3 — retrieved 2026-10-29T15:14:58.247Z
https://api.deps.dev/v3/systems/npm/packages/browser-sync/versions/1.6.3:dependencies — retrieved 2026-10-29T15:14:58.283Z