gatsby 3.0.3
Blazing fast modern site generator for React
gatsby@3.0.3 was published on 2021-03-05. Its manifest declares 152 runtime dependencies and 2 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=12.13.0.
All gatsby versions · Permanent reference to 3.0.3 · Latest release
Package specifications
| Version | 3.0.3 |
|---|---|
| License declaration | MIT |
| Published | 2021-03-05T21:44:20.991Z |
| Node.js requirement | >=12.13.0 |
| Type declarations | Bundled declarations |
| Runtime dependency count | 152 |
| Peer requirement count | 2 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 11327.38 KiB |
| Published file count | 864 |
| Package type | Not declared |
| ES module entry | cache-dir/gatsby-browser-entry.js |
| Default entry | cache-dir/commonjs/gatsby-browser-entry.js |
| Side effects declaration | Not declared |
| Direct advisories | 1 |
| Resolved graph dependencies | Unknown |
| Repository stars | 55920 |
| Repository forks | 10091 |
Install gatsby 3.0.3
npm install gatsby@3.0.3 pnpm add gatsby@3.0.3 yarn add gatsby@3.0.3
Runtime dependencies
- st ^2.0.0
- del ^5.1.0
- got 8.3.2
- joi ^17.2.1
- tmp ^0.2.1
- cors ^2.8.5
- glob ^7.1.6
- mime ^2.4.6
- mitt ^1.2.0
- uuid 3.4.0
- anser ^2.0.1
- axios ^0.21.1
- chalk ^4.1.0
- debug ^3.2.7
- execa ^4.0.3
- fastq ^1.10.0
- hasha ^5.2.0
- meant ^1.0.1
- redux ^4.0.5
- dotenv ^8.2.0
- eslint ^7.20.0
- lodash ^4.17.20
- mkdirp ^0.5.1
- moment ^2.27.0
- semver ^7.3.2
- xstate ^4.11.0
- address 1.1.2
- core-js ^3.6.5
- devcert ^1.1.3
- express ^4.17.1
- graphql ^15.4.0
- p-defer ^3.0.0
- postcss 8.2.6
- prompts ^2.3.2
- slugify ^1.4.4
- type-of ^2.0.1
- webpack ^5.16.0
- bluebird ^3.7.2
- chokidar ^3.4.2
- date-fns ^2.14.0
- fs-extra ^8.1.0
- md5-file ^5.0.0
- memoizee ^0.4.15
- parseurl ^1.3.3
- platform ^1.3.6
- @hapi/joi ^15.1.1
- ansi-html ^0.0.7
- copyfiles ^2.3.0
- invariant ^2.2.4
- socket.io 3.1.1
- better-opn ^2.0.0
- css-loader ^5.0.1
- css.escape ^1.5.1
- gatsby-cli ^3.0.0
- http-proxy ^1.18.1
- micromatch ^4.0.2
- prop-types ^15.7.2
- raw-loader ^4.0.2
- source-map ^0.7.3
- strip-ansi ^5.2.0
- url-loader ^4.1.1
- @babel/core ^7.12.3
- body-parser ^1.19.0
- common-tags ^1.8.0
- compression ^1.7.4
- detect-port ^1.3.0
- file-loader ^6.2.0
- gatsby-link ^3.0.1
- is-relative ^1.0.0
- jest-worker ^24.9.0
- json-loader ^0.5.7
- null-loader ^4.0.1
- opentracing ^0.14.4
- redux-thunk ^2.3.0
- signal-exit ^3.0.3
- stack-trace ^0.0.10
- yaml-loader ^0.6.0
- @babel/types ^7.12.6
- autoprefixer ^10.2.4
- babel-loader ^8.2.2
- better-queue ^3.8.10
- browserslist ^4.12.2
- query-string ^6.13.1
- style-loader ^2.0.0
- @babel/parser ^7.12.5
- cache-manager ^2.11.1
- react-refresh ^0.9.0
- webpack-merge ^5.7.3
- @babel/runtime ^7.12.5
- find-cache-dir ^3.3.1
- latest-version 5.1.0
- normalize-path ^3.0.0
- postcss-loader ^5.0.0
- true-case-path ^2.2.1
- util.promisify ^1.0.1
- @babel/traverse ^7.12.5
- express-graphql ^0.9.0
- graphql-compose ~7.25.0
- is-relative-url ^3.0.0
- react-dev-utils ^11.0.3
- shallow-compare ^1.2.2
- @nodelib/fs.walk ^1.2.4
- fs-exists-cached 1.0.0
- gatsby-telemetry ^2.0.0
- socket.io-client 3.1.1
- v8-compile-cache ^2.2.0
- @babel/code-frame ^7.10.4
- @types/http-proxy ^1.17.4
- gatsby-core-utils ^2.0.0
- string-similarity ^1.2.2
- physical-cpu-count ^2.0.0
- pnp-webpack-plugin ^1.6.4
- source-map-support ^0.5.19
- webpack-dev-server ^3.11.2
- babel-plugin-lodash ^3.3.4
- babel-preset-gatsby ^1.0.0
- eslint-plugin-react ^7.22.0
- fastest-levenshtein ^1.0.12
- gatsby-plugin-utils ^1.0.0
- json-stringify-safe ^5.0.1
- @babel/eslint-parser ^7.13.4
- eslint-plugin-import ^2.22.1
- webpack-stats-plugin ^1.0.3
- eslint-plugin-graphql ^4.0.0
- eslint-webpack-plugin ^2.5.2
- event-source-polyfill ^1.0.15
- terser-webpack-plugin ^5.1.1
- @gatsbyjs/reach-router ^1.3.6
- eslint-plugin-flowtype ^5.3.1
- eslint-plugin-jsx-a11y ^6.4.1
- postcss-flexbugs-fixes ^5.0.2
- webpack-dev-middleware ^4.1.0
- eslint-config-react-app ^6.0.0
- gatsby-legacy-polyfills ^1.0.0
- mini-css-extract-plugin 1.3.9
- name-all-modules-plugin ^1.0.1
- webpack-virtual-modules ^0.3.2
- gatsby-graphiql-explorer ^1.0.0
- gatsby-plugin-typescript ^3.0.0
- @typescript-eslint/parser ^4.15.2
- eslint-plugin-react-hooks ^4.2.0
- gatsby-plugin-page-creator ^3.0.0
- gatsby-react-router-scroll ^4.0.1
- @mikaelkristiansson/domready ^1.0.10
- css-minimizer-webpack-plugin ^1.2.0
- babel-plugin-add-module-exports ^1.0.4
- @gatsbyjs/webpack-hot-middleware ^2.25.2
- @typescript-eslint/eslint-plugin ^4.15.2
- babel-plugin-dynamic-import-node ^2.3.3
- babel-plugin-remove-graphql-queries ^3.0.0
- @pmmmwh/react-refresh-webpack-plugin ^0.4.3
- graphql-playground-middleware-express ^1.7.18
Peer requirements
Optional dependencies
- None declared
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Known direct advisories
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 10/10 — all changesets reviewed |
|---|---|
| Maintained | 2/10 — 2 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 2 |
| Security-Policy | 10/10 — security policy file detected |
| Token-Permissions | 10/10 — GitHub workflow tokens follow principle of least privilege |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| License | 10/10 — license file detected |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Branch-Protection | 5/10 — branch protection is not maximal on development and all release branches |
| Fuzzing | 0/10 — project is not fuzzed |
| Pinned-Dependencies | 0/10 — dependency not pinned by hash detected -- score normalized to 0 |
| SAST | 9/10 — SAST tool is not run on all commits -- score normalized to 9 |
Evidence and freshness
- https://registry.npmjs.org/gatsby/3.0.3 — retrieved 2026-10-30T04:59:57.407Z
- https://api.deps.dev/v3/projects/github.com%2Fgatsbyjs%2Fgatsby — retrieved 2026-10-30T03:57:30.365Z
- https://api.deps.dev/v3/systems/npm/packages/gatsby/versions/3.0.3 — retrieved 2026-10-30T04:59:57.966Z