firebase 7.9.3

Firebase JavaScript library for web and Node.js

firebase@7.9.3 was published on 2020-02-28. Its manifest declares 14 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.

All firebase versions · Permanent reference to 7.9.3 · Latest release

Package specifications

Version	7.9.3
License declaration	Apache-2.0
Published	2020-02-28T23:45:04.912Z
Node.js requirement	Not declared
Type declarations	Bundled declarations
Runtime dependency count	14
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	15796.64 KiB
Published file count	106
Package type	Not declared
ES module entry	dist/index.esm.js
Default entry	dist/index.node.cjs.js
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	157
Repository stars	5154
Repository forks	1039

Install firebase 7.9.3

npm install firebase@7.9.3
pnpm add firebase@7.9.3
yarn add firebase@7.9.3

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@firebase/analytics@0.2.15 — direct
@firebase/analytics-types@0.2.7 — indirect
@firebase/app@0.5.5 — direct
@firebase/app-types@0.5.2 — direct
@firebase/auth@0.13.6 — direct
@firebase/auth-interop-types@0.1.3 — indirect
@firebase/auth-types@0.9.6 — indirect
@firebase/component@0.1.6 — indirect
@firebase/database@0.5.22 — direct
@firebase/database-types@0.4.12 — indirect
@firebase/firestore@1.11.2 — direct
@firebase/firestore-types@1.9.2 — indirect
@firebase/functions@0.4.36 — direct
@firebase/functions-types@0.3.15 — indirect
@firebase/installations@0.4.4 — direct
@firebase/installations-types@0.3.2 — indirect
@firebase/logger@0.1.36 — indirect
@firebase/messaging@0.6.8 — direct
@firebase/messaging-types@0.4.3 — indirect
@firebase/performance@0.2.34 — direct
@firebase/performance-types@0.0.11 — indirect
@firebase/polyfill@0.3.31 — direct
@firebase/remote-config@0.1.15 — direct
@firebase/remote-config-types@0.1.7 — indirect
@firebase/storage@0.3.28 — direct
@firebase/storage-types@0.3.10 — indirect
@firebase/util@0.2.41 — direct
@firebase/webchannel-wrapper@0.2.36 — indirect
@grpc/proto-loader@0.5.6 — indirect
@protobufjs/aspromise@1.1.2 — indirect
@protobufjs/base64@1.1.2 — indirect
@protobufjs/codegen@2.0.5 — indirect
@protobufjs/eventemitter@1.1.1 — indirect
@protobufjs/fetch@1.1.1 — indirect
@protobufjs/float@1.0.2 — indirect
@protobufjs/inquire@1.1.2 — indirect
@protobufjs/path@1.1.2 — indirect
@protobufjs/pool@1.1.0 — indirect
@protobufjs/utf8@1.1.2 — indirect
@types/bytebuffer@5.0.49 — indirect
@types/long@3.0.32 — indirect
@types/long@4.0.2 — indirect
@types/node@26.6.5 — indirect
ansi-regex@2.1.1 — indirect
ascli@1.0.1 — indirect
bytebuffer@5.0.1 — indirect
camelcase@2.1.1 — indirect
cliui@3.2.0 — indirect
code-point-at@1.1.0 — indirect
colour@0.7.1 — indirect
core-js@3.6.2 — indirect
decamelize@1.2.0 — indirect
dom-storage@2.1.0 — indirect
encoding@0.1.14 — indirect
faye-websocket@0.11.3 — indirect
grpc@1.24.2 — indirect
grpc>1.24.2>abbrev@1.1.1 — indirect
grpc>1.24.2>ansi-regex@2.1.1 — indirect
grpc>1.24.2>aproba@1.2.0 — indirect
grpc>1.24.2>are-we-there-yet@1.1.5 — indirect
grpc>1.24.2>balanced-match@1.0.0 — indirect
grpc>1.24.2>brace-expansion@1.1.11 — indirect
grpc>1.24.2>chownr@1.1.3 — indirect
grpc>1.24.2>code-point-at@1.1.0 — indirect
grpc>1.24.2>concat-map@0.0.1 — indirect
grpc>1.24.2>console-control-strings@1.1.0 — indirect
grpc>1.24.2>core-util-is@1.0.2 — indirect
grpc>1.24.2>debug@3.2.6 — indirect
grpc>1.24.2>deep-extend@0.6.0 — indirect
grpc>1.24.2>delegates@1.0.0 — indirect
grpc>1.24.2>detect-libc@1.0.3 — indirect
grpc>1.24.2>fs-minipass@1.2.7 — indirect
grpc>1.24.2>fs.realpath@1.0.0 — indirect
grpc>1.24.2>gauge@2.7.4 — indirect
grpc>1.24.2>glob@7.1.4 — indirect
grpc>1.24.2>has-unicode@2.0.1 — indirect
grpc>1.24.2>iconv-lite@0.4.24 — indirect
grpc>1.24.2>ignore-walk@3.0.3 — indirect
grpc>1.24.2>inflight@1.0.6 — indirect
grpc>1.24.2>inherits@2.0.4 — indirect
grpc>1.24.2>ini@1.3.5 — indirect
grpc>1.24.2>is-fullwidth-code-point@1.0.0 — indirect
grpc>1.24.2>isarray@1.0.0 — indirect
grpc>1.24.2>minimatch@3.0.4 — indirect
grpc>1.24.2>minimist@1.2.0 — indirect
grpc>1.24.2>minipass@2.9.0 — indirect
grpc>1.24.2>minizlib@1.3.3 — indirect
grpc>1.24.2>mkdirp@0.5.1 — indirect
grpc>1.24.2>mkdirp>minimist@0.0.8 — indirect
grpc>1.24.2>ms@2.1.2 — indirect
grpc>1.24.2>needle@2.4.0 — indirect
grpc>1.24.2>node-pre-gyp@0.14.0 — indirect
grpc>1.24.2>nopt@4.0.1 — indirect
grpc>1.24.2>npm-bundled@1.0.6 — indirect
grpc>1.24.2>npm-packlist@1.4.6 — indirect
grpc>1.24.2>npmlog@4.1.2 — indirect
grpc>1.24.2>number-is-nan@1.0.1 — indirect
grpc>1.24.2>object-assign@4.1.1 — indirect
grpc>1.24.2>once@1.4.0 — indirect
grpc>1.24.2>os-homedir@1.0.2 — indirect
grpc>1.24.2>os-tmpdir@1.0.2 — indirect
grpc>1.24.2>osenv@0.1.5 — indirect
grpc>1.24.2>path-is-absolute@1.0.1 — indirect
grpc>1.24.2>process-nextick-args@2.0.1 — indirect
grpc>1.24.2>rc@1.2.8 — indirect
grpc>1.24.2>readable-stream@2.3.6 — indirect
grpc>1.24.2>rimraf@2.7.1 — indirect
grpc>1.24.2>safe-buffer@5.1.2 — indirect
grpc>1.24.2>safer-buffer@2.1.2 — indirect
grpc>1.24.2>sax@1.2.4 — indirect
grpc>1.24.2>semver@5.7.1 — indirect
grpc>1.24.2>set-blocking@2.0.0 — indirect
grpc>1.24.2>signal-exit@3.0.2 — indirect
grpc>1.24.2>string-width@1.0.2 — indirect
grpc>1.24.2>string_decoder@1.1.1 — indirect
grpc>1.24.2>strip-ansi@3.0.1 — indirect
grpc>1.24.2>strip-json-comments@2.0.1 — indirect
grpc>1.24.2>tar@4.4.13 — indirect
grpc>1.24.2>util-deprecate@1.0.2 — indirect
grpc>1.24.2>wide-align@1.1.3 — indirect
grpc>1.24.2>wrappy@1.0.2 — indirect
grpc>1.24.2>yallist@3.1.1 — indirect
http-parser-js@0.5.10 — indirect
iconv-lite@0.7.3 — indirect
idb@3.0.2 — indirect
invert-kv@1.0.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
is-stream@1.1.0 — indirect
isomorphic-fetch@2.2.1 — indirect
lcid@1.0.0 — indirect
lodash.camelcase@4.3.0 — indirect
lodash.clone@4.5.0 — indirect
long@3.2.0 — indirect
long@4.0.0 — indirect
nan@2.30.0 — indirect
node-fetch@1.7.3 — indirect
number-is-nan@1.0.1 — indirect
optjs@3.2.2 — indirect
os-locale@1.4.0 — indirect
promise-polyfill@8.1.3 — indirect
protobufjs@5.0.3 — indirect
protobufjs@6.11.6 — indirect
safe-buffer@5.2.1 — indirect
safer-buffer@2.1.2 — indirect
string-width@1.0.2 — indirect
strip-ansi@3.0.1 — indirect
tslib@1.10.0 — indirect
undici-types@8.9.0 — indirect
websocket-driver@0.7.5 — indirect
websocket-extensions@0.1.4 — indirect
whatwg-fetch@2.0.4 — indirect
whatwg-fetch@3.6.20 — indirect
window-size@0.1.4 — indirect
wrap-ansi@2.1.0 — indirect
xmlhttprequest@1.8.0 — indirect
y18n@3.2.2 — indirect
yargs@3.32.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-3wf4-68gx-mph8

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Code-Review	8/10 — Found 24/27 approved changesets -- score normalized to 8
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	7/10 — detected GitHub workflow tokens with excessive permissions
License	9/10 — license file detected
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	10/10 — all dependencies are pinned
Security-Policy	10/10 — security policy file detected
Branch-Protection	3/10 — branch protection is not maximal on development and all release branches
Fuzzing	0/10 — project is not fuzzed
SAST	7/10 — SAST tool is not run on all commits -- score normalized to 7

Evidence and freshness

https://registry.npmjs.org/firebase/7.9.3 — retrieved 2026-10-29T12:23:24.081Z
https://api.deps.dev/v3/projects/github.com%2Ffirebase%2Ffirebase-js-sdk — retrieved 2026-10-29T11:11:58.116Z
https://api.deps.dev/v3/systems/npm/packages/firebase/versions/7.9.3:dependencies — retrieved 2026-10-29T12:23:24.735Z
https://api.deps.dev/v3/systems/npm/packages/firebase/versions/7.9.3 — retrieved 2026-10-29T12:23:24.825Z