connected-react-router 4.2.1

A Redux binding for React Router v4

connected-react-router@4.2.1 was published on 2017-05-07. Its manifest declares 3 runtime dependencies and 3 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.

All connected-react-router versions · Permanent reference to 4.2.1 · Latest release

Package specifications

Version	4.2.1
License declaration	MIT
Published	2017-05-07T04:46:08.177Z
Node.js requirement	Not declared
Type declarations	Bundled declarations
Runtime dependency count	3
Peer requirement count	3
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	lib/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	19
Repository stars	4682
Repository forks	581

Install connected-react-router 4.2.1

npm install connected-react-router@4.2.1
pnpm add connected-react-router@4.2.1
yarn add connected-react-router@4.2.1

Runtime dependencies

immutable ^3.8.1
lodash.topath ^4.5.2
react-router ^4.1.0

Peer requirements

react ^15.5.4
react-redux ^4.4.8 || ^5.0.4
redux ^3.6.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@babel/runtime@7.29.10 — indirect
history@4.10.1 — indirect
hoist-non-react-statics@2.5.5 — indirect
immutable@3.8.4 — direct
invariant@2.2.4 — indirect
isarray@0.0.1 — indirect
js-tokens@4.0.0 — indirect
lodash.topath@4.5.2 — direct
loose-envify@1.4.0 — indirect
object-assign@4.1.1 — indirect
path-to-regexp@1.9.0 — indirect
prop-types@15.8.1 — indirect
react-is@16.13.1 — indirect
react-router@4.3.1 — direct
resolve-pathname@3.0.0 — indirect
tiny-invariant@1.3.3 — indirect
tiny-warning@1.0.3 — indirect
value-equal@1.0.1 — indirect
warning@4.0.3 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Code-Review	4/10 — Found 2/5 approved changesets -- score normalized to 4
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	9/10 — binaries present in source code
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Security-Policy	0/10 — security policy file not detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Branch-Protection	0/10 — branch protection not enabled on development/release branches
SAST	7/10 — SAST tool detected but not run on all commits

Evidence and freshness

https://registry.npmjs.org/connected-react-router/4.2.1 — retrieved 2026-10-29T14:38:06.220Z
https://api.deps.dev/v3/projects/github.com%2Fsupasate%2Fconnected-react-router — retrieved 2026-10-29T10:21:00.097Z
https://api.deps.dev/v3/systems/npm/packages/connected-react-router/versions/4.2.1 — retrieved 2026-10-29T14:38:06.753Z
https://api.deps.dev/v3/systems/npm/packages/connected-react-router/versions/4.2.1:dependencies — retrieved 2026-10-29T14:38:06.772Z