express-graphql 0.10.1
Production ready GraphQL HTTP middleware.
express-graphql@0.10.1 was published on 2020-07-05. Its manifest declares 5 runtime dependencies and 1 peer requirement. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >= 10.x.
Deprecated: This package is no longer maintained. We recommend using `graphql-http` instead. Please consult the migration document https://github.com/graphql/graphql-http#migrating-express-grpahql.
All express-graphql versions · Permanent reference to 0.10.1 · Latest release
Package specifications
| Version | 0.10.1 |
|---|---|
| License declaration | MIT |
| Published | 2020-07-05T15:14:46.120Z |
| Node.js requirement | >= 10.x |
| Type declarations | Bundled declarations |
| Runtime dependency count | 5 |
| Peer requirement count | 1 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 1053.89 KiB |
| Published file count | 12 |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | index.js |
| Side effects declaration | false |
| Direct advisories | 0 |
| Resolved graph dependencies | 117 |
| Repository stars | 6250 |
| Repository forks | 517 |
Install express-graphql 0.10.1
npm install express-graphql@0.10.1 pnpm add express-graphql@0.10.1 yarn add express-graphql@0.10.1
Runtime dependencies
- cspell 4.0.63
- accepts ^1.3.7
- raw-body ^2.4.1
- http-errors 1.8.0
- content-type ^1.0.4
Peer requirements
- graphql ^14.6.0 || ^15.0.0
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- @cspell/dict-aws@1.0.14 — indirect
- @cspell/dict-bash@1.0.18 — indirect
- @cspell/dict-companies@1.0.40 — indirect
- @cspell/dict-cpp@1.1.40 — indirect
- @cspell/dict-cryptocurrencies@1.0.10 — indirect
- @cspell/dict-csharp@1.0.11 — indirect
- @cspell/dict-css@1.0.13 — indirect
- @cspell/dict-django@1.0.26 — indirect
- @cspell/dict-dotnet@1.0.32 — indirect
- @cspell/dict-elixir@1.0.26 — indirect
- @cspell/dict-en-gb@1.1.33 — indirect
- @cspell/dict-en_us@1.2.45 — indirect
- @cspell/dict-filetypes@1.1.8 — indirect
- @cspell/dict-fonts@1.0.14 — indirect
- @cspell/dict-fullstack@1.0.39 — indirect
- @cspell/dict-golang@1.1.24 — indirect
- @cspell/dict-haskell@1.0.13 — indirect
- @cspell/dict-html@1.1.9 — indirect
- @cspell/dict-html-symbol-entities@1.0.23 — indirect
- @cspell/dict-java@1.0.23 — indirect
- @cspell/dict-latex@1.0.25 — indirect
- @cspell/dict-lorem-ipsum@1.0.22 — indirect
- @cspell/dict-lua@1.0.16 — indirect
- @cspell/dict-node@1.0.12 — indirect
- @cspell/dict-npm@1.0.16 — indirect
- @cspell/dict-php@1.0.25 — indirect
- @cspell/dict-powershell@1.0.19 — indirect
- @cspell/dict-python@1.0.38 — indirect
- @cspell/dict-ruby@1.0.15 — indirect
- @cspell/dict-rust@1.0.23 — indirect
- @cspell/dict-scala@1.0.21 — indirect
- @cspell/dict-software-terms@1.0.48 — indirect
- @cspell/dict-typescript@1.0.20 — indirect
- accepts@1.3.8 — direct
- ansi-styles@3.2.1 — indirect
- array-timsort@1.0.3 — indirect
- at-least-node@1.0.0 — indirect
- balanced-match@1.0.2 — indirect
- brace-expansion@1.1.21 — indirect
- braces@3.0.3 — indirect
- bytes@3.1.2 — indirect
- chalk@2.4.2 — indirect
- color-convert@1.9.3 — indirect
- color-name@1.1.3 — indirect
- commander@2.20.3 — indirect
- comment-json@3.0.3 — indirect
- comment-json@4.6.2 — indirect
- concat-map@0.0.1 — indirect
- configstore@5.0.1 — indirect
- content-type@1.0.5 — direct
- core-util-is@1.0.3 — indirect
- crypto-random-string@2.0.0 — indirect
- cspell@4.0.63 — direct
- cspell-glob@0.1.25 — indirect
- cspell-io@4.1.7 — indirect
- cspell-lib@4.3.12 — indirect
- cspell-trie-lib@4.2.8 — indirect
- cspell-util-bundle@4.1.11 — indirect
- depd@1.1.2 — indirect
- depd@2.0.0 — indirect
- dot-prop@5.3.0 — indirect
- escape-string-regexp@1.0.5 — indirect
- esprima@4.0.1 — indirect
- fill-range@7.1.1 — indirect
- fs-extra@9.1.0 — indirect
- fs.realpath@1.0.0 — indirect
- gensequence@3.1.1 — indirect
- get-stdin@7.0.0 — indirect
- glob@7.2.3 — indirect
- global-dirs@0.1.1 — indirect
- graceful-fs@4.2.11 — indirect
- has-flag@3.0.0 — indirect
- has-own-prop@2.0.0 — indirect
- http-errors@1.8.0 — direct
- http-errors@2.0.1 — indirect
- iconv-lite@0.4.24 — indirect
- iconv-lite@0.6.3 — indirect
- imurmurhash@0.1.4 — indirect
- inflight@1.0.6 — indirect
- inherits@2.0.4 — indirect
- ini@1.3.8 — indirect
- is-number@7.0.0 — indirect
- is-obj@2.0.0 — indirect
- is-typedarray@1.0.0 — indirect
- iterable-to-stream@1.0.1 — indirect
- jsonfile@6.2.1 — indirect
- make-dir@3.1.0 — indirect
- micromatch@4.0.8 — indirect
- mime-db@1.52.0 — indirect
- mime-types@2.1.35 — indirect
- minimatch@3.1.5 — indirect
- negotiator@0.6.3 — indirect
- once@1.4.0 — indirect
- path-is-absolute@1.0.1 — indirect
- picomatch@2.3.2 — indirect
- raw-body@2.5.3 — direct
- repeat-string@1.6.1 — indirect
- resolve-from@5.0.0 — indirect
- resolve-global@1.0.0 — indirect
- safer-buffer@2.1.2 — indirect
- semver@6.3.1 — indirect
- setprototypeof@1.2.0 — indirect
- signal-exit@3.0.7 — indirect
- statuses@1.5.0 — indirect
- statuses@2.0.2 — indirect
- supports-color@5.5.0 — indirect
- to-regex-range@5.0.1 — indirect
- toidentifier@1.0.0 — indirect
- toidentifier@1.0.1 — indirect
- typedarray-to-buffer@3.1.5 — indirect
- unique-string@2.0.0 — indirect
- universalify@2.0.1 — indirect
- unpipe@1.0.0 — indirect
- vscode-uri@3.2.0 — indirect
- wrappy@1.0.2 — indirect
- write-file-atomic@3.0.3 — indirect
- xdg-basedir@4.0.0 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 7/10 — Found 19/26 approved changesets -- score normalized to 7 |
|---|---|
| Maintained | 0/10 — project is archived |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Token-Permissions | 0/10 — detected GitHub workflow tokens with excessive permissions |
| Pinned-Dependencies | 5/10 — dependency not pinned by hash detected -- score normalized to 5 |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| Fuzzing | 0/10 — project is not fuzzed |
| License | 10/10 — license file detected |
| Branch-Protection | 0/10 — branch protection not enabled on development/release branches |
| Security-Policy | 10/10 — security policy file detected |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
Evidence and freshness
- https://registry.npmjs.org/express-graphql/0.10.1 — retrieved 2026-10-30T06:48:31.274Z
- https://api.deps.dev/v3/projects/github.com%2Fgraphql%2Fexpress-graphql — retrieved 2026-10-30T04:45:03.580Z
- https://api.deps.dev/v3/systems/npm/packages/express-graphql/versions/0.10.1 — retrieved 2026-10-30T06:48:31.784Z
- https://api.deps.dev/v3/systems/npm/packages/express-graphql/versions/0.10.1:dependencies — retrieved 2026-10-30T06:48:31.837Z