firebase-admin 7.4.0

Firebase admin SDK for Node.js

firebase-admin@7.4.0 was published on 2019-05-21. Its manifest declares 8 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=6.0.0.

All firebase-admin versions · Permanent reference to 7.4.0 · Latest release

Package specifications

Version	7.4.0
License declaration	Apache-2.0
Published	2019-05-21T18:06:38.696Z
Node.js requirement	>=6.0.0
Type declarations	Bundled declarations
Runtime dependency count	8
Peer requirement count	0
Optional dependency count	2
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	471.63 KiB
Published file count	38
Package type	Not declared
ES module entry	Not declared
Default entry	lib/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	278
Repository stars	1751
Repository forks	426

Install firebase-admin 7.4.0

npm install firebase-admin@7.4.0
pnpm add firebase-admin@7.4.0
yarn add firebase-admin@7.4.0

Runtime dependencies

Peer requirements

None declared

Optional dependencies

@google-cloud/storage ^2.3.0
@google-cloud/firestore ^1.3.0

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@firebase/app@0.3.17 — direct
@firebase/database@0.3.20 — direct
@google-cloud/firestore@1.3.0 — direct
@google-cloud/storage@2.5.0 — direct
@types/node@8.10.66 — direct
dicer@0.3.1 — direct
jsonwebtoken@8.1.0 — direct
node-forge@0.7.4 — direct
@firebase/app-types@0.3.10 — indirect
@firebase/util@0.2.14 — indirect
dom-storage@2.1.0 — indirect
tslib@1.9.3 — indirect
xmlhttprequest@1.8.0 — indirect
@firebase/database-types@0.3.11 — indirect
@firebase/logger@0.1.13 — indirect
faye-websocket@0.11.1 — indirect
bun@0.0.12 — indirect
deep-equal@1.1.2 — indirect
functional-red-black-tree@1.0.1 — indirect
google-gax@0.25.6 — indirect
lodash.merge@4.6.2 — indirect
through2@3.0.2 — indirect
@google-cloud/common@0.32.1 — indirect
@google-cloud/paginator@0.2.0 — indirect
@google-cloud/promisify@0.4.0 — indirect
arrify@1.0.1 — indirect
async@2.6.4 — indirect
compressible@2.0.18 — indirect
concat-stream@2.0.0 — indirect
date-and-time@0.6.3 — indirect
duplexify@3.7.1 — indirect
extend@3.0.2 — indirect
gcs-resumable-upload@1.1.0 — indirect
hash-stream-validation@0.2.4 — indirect
mime@2.6.0 — indirect
mime-types@2.1.35 — indirect
onetime@5.1.2 — indirect
pumpify@1.5.1 — indirect
snakeize@0.1.0 — indirect
stream-events@1.0.5 — indirect
teeny-request@3.11.3 — indirect
xdg-basedir@3.0.0 — indirect
streamsearch@1.1.0 — indirect
jws@3.2.3 — indirect
lodash.includes@4.3.0 — indirect
lodash.isboolean@3.0.3 — indirect
lodash.isinteger@4.0.4 — indirect
lodash.isnumber@3.0.3 — indirect
lodash.isplainobject@4.0.6 — indirect
lodash.isstring@4.0.1 — indirect
lodash.once@4.1.1 — indirect
ms@2.1.3 — indirect
xtend@4.0.2 — indirect
websocket-driver@0.7.5 — indirect
readable-stream@1.0.34 — indirect
is-arguments@1.2.0 — indirect
is-date-object@1.1.0 — indirect
is-regex@1.2.1 — indirect
object-is@1.1.6 — indirect
object-keys@1.1.1 — indirect
regexp.prototype.flags@1.5.4 — indirect
@grpc/grpc-js@0.3.6 — indirect
@grpc/proto-loader@0.4.0 — indirect
google-auth-library@3.1.2 — indirect
google-proto-files@0.20.0 — indirect
grpc@1.24.11 — indirect
grpc-gcp@0.1.1 — indirect
is-stream-ended@0.1.4 — indirect
lodash.at@4.6.0 — indirect
lodash.has@4.5.2 — indirect
protobufjs@6.11.6 — indirect
retry-request@4.2.2 — indirect
semver@6.3.1 — indirect
walkdir@0.3.2 — indirect
inherits@2.0.4 — indirect
readable-stream@3.6.2 — indirect
@google-cloud/projectify@0.3.3 — indirect
@types/request@2.48.13 — indirect
arrify@2.0.1 — indirect
ent@2.2.2 — indirect
pify@4.0.1 — indirect
split-array-stream@2.0.0 — indirect
lodash@4.18.1 — indirect
mime-db@1.52.0 — indirect
buffer-from@1.1.2 — indirect
readable-stream@3.6.2 — indirect
typedarray@0.0.6 — indirect
end-of-stream@1.4.5 — indirect
readable-stream@2.3.8 — indirect
stream-shift@1.0.3 — indirect
abort-controller@2.0.3 — indirect
configstore@4.0.0 — indirect
gaxios@1.8.4 — indirect
mimic-fn@2.1.0 — indirect
pump@2.0.1 — indirect
stubs@3.0.0 — indirect
https-proxy-agent@2.2.4 — indirect
node-fetch@2.7.0 — indirect
uuid@3.4.0 — indirect
jwa@1.4.2 — indirect
safe-buffer@5.2.1 — indirect
http-parser-js@0.5.10 — indirect
websocket-extensions@0.1.4 — indirect
core-util-is@1.0.3 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
call-bound@1.0.4 — indirect
has-tostringtag@1.0.2 — indirect
gopd@1.2.0 — indirect
hasown@2.0.4 — indirect
call-bind@1.0.9 — indirect
define-properties@1.2.1 — indirect
es-errors@1.3.0 — indirect
get-proto@1.0.1 — indirect
set-function-name@2.0.2 — indirect
semver@5.7.2 — indirect
lodash.camelcase@4.3.0 — indirect
base64-js@1.5.1 — indirect
fast-text-encoding@1.0.6 — indirect
gcp-metadata@1.0.0 — indirect
gtoken@2.3.3 — indirect
lru-cache@5.1.1 — indirect
semver@5.7.2 — indirect
@mapbox/node-pre-gyp@1.0.11 — indirect
@types/bytebuffer@5.0.49 — indirect
lodash.clone@4.5.0 — indirect
nan@2.30.0 — indirect
protobufjs@5.0.3 — indirect
@protobufjs/aspromise@1.1.2 — indirect
@protobufjs/base64@1.1.2 — indirect
@protobufjs/codegen@2.0.5 — indirect
@protobufjs/eventemitter@1.1.1 — indirect
@protobufjs/fetch@1.1.1 — indirect
@protobufjs/float@1.0.2 — indirect
@protobufjs/inquire@1.1.2 — indirect
@protobufjs/path@1.1.2 — indirect
@protobufjs/pool@1.1.0 — indirect
@protobufjs/utf8@1.1.2 — indirect
@types/long@4.0.2 — indirect
@types/node@26.6.6 — indirect
long@4.0.0 — indirect
debug@4.4.3 — indirect
string_decoder@1.3.0 — indirect
util-deprecate@1.0.2 — indirect
@types/caseless@0.12.5 — indirect
@types/tough-cookie@4.0.5 — indirect
form-data@2.5.6 — indirect
punycode@1.4.1 — indirect
safe-regex-test@1.1.0 — indirect
string_decoder@1.3.0 — indirect
once@1.4.0 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
event-target-shim@5.0.1 — indirect
dot-prop@4.2.1 — indirect
graceful-fs@4.2.11 — indirect
make-dir@1.3.0 — indirect
unique-string@1.0.0 — indirect
write-file-atomic@2.4.3 — indirect
abort-controller@3.0.0 — indirect
agent-base@4.3.0 — indirect
debug@3.2.7 — indirect
whatwg-url@5.0.0 — indirect
buffer-equal-constant-time@1.0.1 — indirect
ecdsa-sig-formatter@1.0.11 — indirect
call-bind-apply-helpers@1.0.2 — indirect
get-intrinsic@1.3.1 — indirect
has-symbols@1.1.0 — indirect
function-bind@1.1.2 — indirect
es-define-property@1.0.1 — indirect
set-function-length@1.2.2 — indirect
define-data-property@1.1.4 — indirect
has-property-descriptors@1.0.2 — indirect
dunder-proto@1.0.1 — indirect
es-object-atoms@1.1.2 — indirect
functions-have-names@1.2.3 — indirect
json-bigint@0.3.1 — indirect
google-p12-pem@1.0.5 — indirect
yallist@3.1.1 — indirect
detect-libc@2.1.2 — indirect
https-proxy-agent@5.0.1 — indirect
make-dir@3.1.0 — indirect
nopt@5.0.0 — indirect
npmlog@5.0.1 — indirect
rimraf@3.0.2 — indirect
semver@7.8.5 — indirect
tar@6.2.1 — indirect
@types/long@3.0.32 — indirect
ascli@1.0.1 — indirect
bytebuffer@5.0.1 — indirect
glob@7.2.3 — indirect
yargs@3.32.0 — indirect
undici-types@8.9.0 — indirect
asynckit@0.4.0 — indirect
combined-stream@1.0.8 — indirect
es-set-tostringtag@2.1.0 — indirect
wrappy@1.0.2 — indirect
is-obj@1.0.1 — indirect
pify@3.0.0 — indirect
crypto-random-string@1.0.0 — indirect
imurmurhash@0.1.4 — indirect
signal-exit@3.0.7 — indirect
es6-promisify@5.0.0 — indirect
tr46@0.0.3 — indirect
webidl-conversions@3.0.1 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
generator-function@2.0.1 — indirect
math-intrinsics@1.1.0 — indirect
bignumber.js@9.3.1 — indirect
node-forge@0.10.0 — indirect
agent-base@6.0.2 — indirect
debug@4.4.3 — indirect
abbrev@1.1.1 — indirect
are-we-there-yet@2.0.0 — indirect
console-control-strings@1.1.0 — indirect
gauge@3.0.2 — indirect
set-blocking@2.0.0 — indirect
chownr@2.0.0 — indirect
fs-minipass@2.1.0 — indirect
minipass@5.0.0 — indirect
minizlib@2.1.2 — indirect
mkdirp@1.0.4 — indirect
yallist@4.0.0 — indirect
colour@0.7.1 — indirect
optjs@3.2.2 — indirect
long@3.2.0 — indirect
fs.realpath@1.0.0 — indirect
inflight@1.0.6 — indirect
minimatch@3.1.5 — indirect
path-is-absolute@1.0.1 — indirect
camelcase@2.1.1 — indirect
cliui@3.2.0 — indirect
decamelize@1.2.0 — indirect
os-locale@1.4.0 — indirect
string-width@1.0.2 — indirect
window-size@0.1.4 — indirect
y18n@3.2.2 — indirect
delayed-stream@1.0.0 — indirect
es6-promise@4.2.8 — indirect
delegates@1.0.0 — indirect
readable-stream@3.6.2 — indirect
aproba@2.1.0 — indirect
color-support@1.1.3 — indirect
has-unicode@2.0.1 — indirect
object-assign@4.1.1 — indirect
string-width@4.2.3 — indirect
strip-ansi@6.0.1 — indirect
wide-align@1.1.5 — indirect
minipass@3.3.6 — indirect
minipass@3.3.6 — indirect
yallist@4.0.0 — indirect
brace-expansion@1.1.21 — indirect
string-width@1.0.2 — indirect
strip-ansi@3.0.1 — indirect
wrap-ansi@2.1.0 — indirect
lcid@1.0.0 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
strip-ansi@3.0.1 — indirect
string_decoder@1.3.0 — indirect
emoji-regex@8.0.0 — indirect
is-fullwidth-code-point@3.0.0 — indirect
ansi-regex@5.0.1 — indirect
yallist@4.0.0 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
is-fullwidth-code-point@1.0.0 — indirect
ansi-regex@2.1.1 — indirect
string-width@1.0.2 — indirect
strip-ansi@3.0.1 — indirect
invert-kv@1.0.0 — indirect
number-is-nan@1.0.1 — indirect
ansi-regex@2.1.1 — indirect
is-fullwidth-code-point@1.0.0 — indirect
ansi-regex@2.1.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Code-Review	10/10 — all changesets reviewed
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
Binary-Artifacts	10/10 — no binaries found in the repo
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	8/10 — dependency not pinned by hash detected -- score normalized to 8
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Security-Policy	10/10 — security policy file detected
SAST	9/10 — SAST tool is not run on all commits -- score normalized to 9

Evidence and freshness

https://registry.npmjs.org/firebase-admin/7.4.0 — retrieved 2026-10-30T04:33:19.136Z
https://api.deps.dev/v3/projects/github.com%2Ffirebase%2Ffirebase-admin-node — retrieved 2026-10-30T02:01:47.613Z
https://api.deps.dev/v3/systems/npm/packages/firebase-admin/versions/7.4.0 — retrieved 2026-10-30T04:33:19.635Z
https://api.deps.dev/v3/systems/npm/packages/firebase-admin/versions/7.4.0:dependencies — retrieved 2026-10-30T04:33:19.666Z