gatsby 2.19.21

Blazing fast modern site generator for React

gatsby@2.19.21 was published on 2020-02-24. Its manifest declares 132 runtime dependencies and 2 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=8.0.0.

All gatsby versions · Permanent reference to 2.19.21 · Latest release

Package specifications

Version	2.19.21
License declaration	MIT
Published	2020-02-24T16:45:15.821Z
Node.js requirement	>=8.0.0
Type declarations	Bundled declarations
Runtime dependency count	132
Peer requirement count	2
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	2451.71 KiB
Published file count	440
Package type	Not declared
ES module entry	cache-dir/gatsby-browser-entry.js
Default entry	cache-dir/commonjs/gatsby-browser-entry.js
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	Unknown
Repository stars	55920
Repository forks	10091

Install gatsby 2.19.21

npm install gatsby@2.19.21
pnpm add gatsby@2.19.21
yarn add gatsby@2.19.21

Runtime dependencies

del ^5.1.0
got 8.3.2
md5 ^2.2.1
cors ^2.8.5
flat ^4.1.0
glob ^7.1.6
mime ^2.4.4
mitt ^1.2.0
sift ^5.1.0
uuid ^3.3.3
axios ^0.19.0
chalk ^2.4.2
debug ^3.2.6
hasha ^5.1.0
redux ^4.0.4
dotenv ^8.2.0
eslint ^6.7.2
is-wsl ^2.1.1
lodash ^4.17.15
lokijs ^1.5.8
mkdirp ^0.5.1
moment ^2.24.0
semver ^5.7.1
xstate ^4.7.2
address 1.1.2
core-js ^2.6.11
express ^4.17.1
graphql ^14.5.8
p-defer ^3.0.0
prompts ^2.3.0
slugify ^1.3.6
type-of ^2.0.1
webpack ~4.41.2
bluebird ^3.7.2
chokidar 3.3.0
fs-extra ^8.1.0
md5-file ^3.2.3
parseurl ^1.3.3
@hapi/joi ^15.1.1
copyfiles ^2.1.1
invariant ^2.2.4
socket.io ^2.3.0
babel-core 7.0.0-bridge.0
better-opn 1.0.0
css-loader ^1.0.1
gatsby-cli ^2.9.0
micromatch ^3.1.10
prop-types ^15.7.2
raw-loader ^0.5.1
url-loader ^1.1.2
@babel/core ^7.7.5
common-tags ^1.8.0
compression ^1.7.4
detect-port ^1.3.0
devcert-san ^0.3.3
file-loader ^1.1.11
gatsby-link ^2.2.29
is-relative ^1.0.0
jest-worker ^24.9.0
json-loader ^0.5.7
null-loader ^0.1.1
opentracing ^0.14.4
redux-thunk ^2.3.0
signal-exit ^3.0.2
stack-trace ^0.0.10
yaml-loader ^0.5.0
autoprefixer ^9.7.3
babel-eslint ^10.0.3
babel-loader ^8.0.6
better-queue ^3.8.10
browserslist 3.2.8
style-loader ^0.23.1
@babel/parser ^7.7.5
@reach/router ^1.3.1
cache-manager ^2.10.1
eslint-loader ^2.2.1
webpack-merge ^4.2.2
@babel/runtime ^7.7.6
convert-hrtime ^3.0.0
normalize-path ^2.1.1
postcss-loader ^2.1.6
true-case-path ^2.2.1
util.promisify ^1.0.0
@babel/polyfill ^7.7.0
@babel/traverse ^7.7.4
express-graphql ^0.9.0
graphql-compose ^6.3.7
is-relative-url ^3.0.0
react-dev-utils ^4.2.3
shallow-compare ^1.2.2
fast-levenshtein ^2.0.6
fs-exists-cached 1.0.0
gatsby-telemetry ^1.1.49
react-hot-loader ^4.12.18
v8-compile-cache ^1.1.2
@babel/code-frame ^7.5.5
gatsby-core-utils ^1.0.28
string-similarity ^1.2.2
physical-cpu-count ^2.0.0
pnp-webpack-plugin ^1.5.0
webpack-dev-server ^3.9.0
babel-preset-gatsby ^0.2.29
eslint-plugin-react ^7.17.0
json-stringify-safe ^5.0.1
react-error-overlay ^3.0.0
eslint-plugin-import ^2.19.1
webpack-stats-plugin ^0.3.0
cache-manager-fs-hash ^0.0.7
eslint-plugin-graphql ^3.1.0
event-source-polyfill ^1.0.11
terser-webpack-plugin ^1.4.2
eslint-plugin-flowtype ^3.13.0
eslint-plugin-jsx-a11y ^6.2.3
postcss-flexbugs-fixes ^3.3.1
webpack-dev-middleware ^3.7.2
webpack-hot-middleware ^2.25.0
eslint-config-react-app ^5.1.0
mini-css-extract-plugin ^0.8.0
name-all-modules-plugin ^1.0.1
gatsby-graphiql-explorer ^0.2.34
@typescript-eslint/parser ^2.11.0
eslint-plugin-react-hooks ^1.7.0
gatsby-plugin-page-creator ^2.1.40
gatsby-react-router-scroll ^2.1.21
@mikaelkristiansson/domready ^1.0.10
babel-plugin-add-module-exports ^0.3.3
@typescript-eslint/eslint-plugin ^2.11.0
babel-plugin-dynamic-import-node ^2.3.0
optimize-css-assets-webpack-plugin ^5.0.3
babel-plugin-remove-graphql-queries ^2.7.23
@pieh/friendly-errors-webpack-plugin 1.7.0-chalk-2
graphql-playground-middleware-express ^1.7.12

Peer requirements

react ^16.4.2
react-dom ^16.4.2

Optional dependencies

None declared

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-c6f8-8r25-c4gc

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	10/10 — all changesets reviewed
Maintained	2/10 — 2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2
Security-Policy	10/10 — security policy file detected
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
License	10/10 — license file detected
Binary-Artifacts	10/10 — no binaries found in the repo
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Fuzzing	0/10 — project is not fuzzed
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
SAST	9/10 — SAST tool is not run on all commits -- score normalized to 9

Evidence and freshness

https://registry.npmjs.org/gatsby/2.19.21 — retrieved 2026-10-30T04:30:38.676Z
https://api.deps.dev/v3/projects/github.com%2Fgatsbyjs%2Fgatsby — retrieved 2026-10-30T03:57:30.365Z
https://api.deps.dev/v3/systems/npm/packages/gatsby/versions/2.19.21 — retrieved 2026-10-30T04:30:39.491Z