gatsby 1.9.39
React.js Static Site Generator
gatsby@1.9.39 was published on 2017-09-19. Its manifest declares 112 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >4.0.0.
All gatsby versions · Permanent reference to 1.9.39 · Latest release
Package specifications
| Version | 1.9.39 |
|---|---|
| License declaration | MIT |
| Published | 2017-09-19T22:56:23.575Z |
| Node.js requirement | >4.0.0 |
| Type declarations | Not declared |
| Runtime dependency count | 112 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | Not supplied |
| Published file count | Not supplied |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | index.js |
| Side effects declaration | Not declared |
| Direct advisories | 1 |
| Resolved graph dependencies | Unknown |
| Repository stars | 55920 |
| Repository forks | 10091 |
Install gatsby 1.9.39
npm install gatsby@1.9.39 pnpm add gatsby@1.9.39 yarn add gatsby@1.9.39
Runtime dependencies
- del ^3.0.0
- joi ^9.1.1
- opn ^5.1.0
- boom ^2.7.2
- flat ^2.0.1
- glob ^7.1.1
- hapi ^8.5.1
- mime ^1.3.6
- mitt ^1.1.2
- sift ^3.2.6
- async ^2.1.2
- chalk ^1.1.3
- debug ^2.6.0
- json5 ^0.5.0
- lowdb ^0.16.2
- react ^15.6.0
- redux ^3.6.0
- slash ^1.0.0
- dotenv ^4.0.0
- lodash ^4.17.4
- mkdirp ^0.5.1
- moment ^2.16.0
- tracer ^0.8.9
- babylon ^6.17.3
- core-js ^2.5.0
- express ^4.14.0
- graphql ^0.10.3
- history ^4.6.2
- type-of ^2.0.1
- webpack ^1.13.3
- bluebird ^3.5.0
- chokidar ^1.7.0
- domready ^1.0.8
- fs-extra ^4.0.1
- md5-file ^3.1.1
- commander ^2.11.0
- copyfiles ^1.2.0
- invariant ^2.2.2
- lodash-id ^0.14.0
- react-dom ^15.6.0
- socket.io ^2.0.3
- yurnalist ^0.1.10
- babel-core ^6.24.1
- css-loader ^0.26.1
- observable ^2.1.4
- raw-loader ^0.5.1
- source-map ^0.5.7
- url-loader ^0.5.7
- common-tags ^1.4.0
- detect-port ^1.2.1
- file-loader ^0.9.0
- gray-matter ^2.1.0
- is-relative ^0.2.1
- json-loader ^0.5.2
- null-loader ^0.1.1
- path-exists ^3.0.0
- resolve-cwd ^2.0.0
- stack-trace ^0.0.10
- yaml-loader ^0.4.0
- babel-loader ^6.0.0
- front-matter ^2.1.0
- pretty-error ^2.1.1
- react-router ^4.1.1
- style-loader ^0.13.0
- babel-runtime ^6.26.0
- bundle-loader ^0.5.4
- eventemitter2 ^4.1.0
- graphql-relay ^0.5.1
- object-assign ^4.1.0
- babel-polyfill ^6.23.0
- babel-traverse ^6.24.1
- convert-hrtime ^2.0.0
- normalize-path ^2.1.1
- parse-filepath ^1.0.1
- postcss-import ^8.2.0
- postcss-loader ^0.13.0
- relay-compiler ^1.1.0
- express-graphql ^0.6.6
- hosted-git-info ^2.4.2
- is-relative-url ^2.0.0
- postcss-cssnext ^2.8.0
- babel-code-frame ^6.22.0
- babel-preset-env ^1.6.0
- postcss-reporter ^1.4.1
- react-hot-loader ^3.0.0-beta.6
- react-router-dom ^4.1.1
- webpack-md5-hash 0.0.5
- node-libs-browser ^2.0.0
- string-similarity ^1.2.0
- underscore.string ^3.3.4
- webpack-validator ^2.2.7
- babel-preset-react ^6.24.1
- graphql-skip-limit ^1.0.5
- webpack-dev-server ^1.16.1
- babel-preset-es2015 ^6.24.1
- json-stringify-safe ^5.0.1
- babel-preset-stage-0 ^6.24.1
- gatsby-module-loader ^1.0.5
- webpack-configurator ^0.3.0
- webpack-stats-plugin ^0.1.4
- remote-redux-devtools ^0.5.7
- webpack-dev-middleware ^1.8.4
- webpack-hot-middleware ^2.13.2
- postcss-browser-reporter ^0.5.0
- gatsby-react-router-scroll ^1.0.1
- extract-text-webpack-plugin ^1.0.1
- gatsby-1-config-css-modules ^1.0.4
- chunk-manifest-webpack-plugin 0.1.0
- friendly-errors-webpack-plugin ^1.6.1
- babel-plugin-add-module-exports ^0.2.1
- babel-plugin-transform-object-assign ^6.8.0
- static-site-generator-webpack-plugin ^3.4.1
Peer requirements
- None declared
Optional dependencies
- None declared
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Known direct advisories
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 10/10 — all changesets reviewed |
|---|---|
| Maintained | 2/10 — 2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2 |
| Security-Policy | 10/10 — security policy file detected |
| Token-Permissions | 10/10 — GitHub workflow tokens follow principle of least privilege |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| License | 10/10 — license file detected |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Branch-Protection | 5/10 — branch protection is not maximal on development and all release branches |
| Fuzzing | 0/10 — project is not fuzzed |
| Pinned-Dependencies | 0/10 — dependency not pinned by hash detected -- score normalized to 0 |
| SAST | 9/10 — SAST tool is not run on all commits -- score normalized to 9 |
Evidence and freshness
- https://registry.npmjs.org/gatsby/1.9.39 — retrieved 2026-10-30T04:30:46.056Z
- https://api.deps.dev/v3/projects/github.com%2Fgatsbyjs%2Fgatsby — retrieved 2026-10-30T03:57:30.365Z
- https://api.deps.dev/v3/systems/npm/packages/gatsby/versions/1.9.39 — retrieved 2026-10-30T04:30:46.658Z