ipfs-bitswap 5.0.3
Node.js implementation of the Bitswap data exchange protocol used by IPFS
ipfs-bitswap@5.0.3 was published on 2021-04-20. Its manifest declares 22 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.
All ipfs-bitswap versions · Permanent reference to 5.0.3 · Latest release
Package specifications
| Version | 5.0.3 |
|---|---|
| License declaration | MIT |
| Published | 2021-04-20T11:16:34.016Z |
| Node.js requirement | Not declared |
| Type declarations | Bundled declarations |
| Runtime dependency count | 22 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 398.90 KiB |
| Published file count | 65 |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | src/index.js |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 183 |
| Repository stars | 75 |
| Repository forks | 44 |
Install ipfs-bitswap 5.0.3
npm install ipfs-bitswap@5.0.3 pnpm add ipfs-bitswap@5.0.3 yarn add ipfs-bitswap@5.0.3
Runtime dependencies
- abort-controller ^3.0.0
- any-signal ^2.1.2
- cids ^1.1.6
- debug ^4.2.0
- ipld-block ^0.11.0
- it-length-prefixed ^5.0.2
- it-pipe ^1.1.0
- just-debounce-it ^1.1.0
- libp2p-interfaces ^0.10.0
- moving-average ^1.0.1
- multiaddr ^9.0.1
- multicodec ^3.0.1
- multihashing-async ^2.1.2
- native-abort-controller ^1.0.3
- process ^0.11.10
- protobufjs ^6.10.2
- readable-stream ^3.6.0
- streaming-iterables ^5.0.4
- uint8arrays ^2.1.3
- url ^0.11.0
- util ^0.12.3
- varint-decoder ^1.0.0
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- abort-controller@3.0.0 — direct
- any-signal@2.1.2 — direct
- cids@1.1.9 — direct
- debug@4.4.3 — direct
- ipld-block@0.11.1 — direct
- it-length-prefixed@5.0.3 — direct
- it-pipe@1.1.0 — direct
- just-debounce-it@1.5.0 — direct
- libp2p-interfaces@0.10.4 — direct
- moving-average@1.0.1 — direct
- multiaddr@9.0.2 — direct
- multicodec@3.2.1 — direct
- multihashing-async@2.1.4 — direct
- native-abort-controller@1.0.4 — direct
- process@0.11.10 — direct
- protobufjs@6.11.6 — direct
- readable-stream@3.6.2 — direct
- streaming-iterables@5.0.4 — direct
- uint8arrays@2.1.10 — direct
- url@0.11.4 — direct
- util@0.12.5 — direct
- varint-decoder@1.0.0 — direct
- event-target-shim@5.0.1 — indirect
- multibase@4.0.6 — indirect
- multihashes@4.0.3 — indirect
- uint8arrays@3.1.1 — indirect
- ms@2.1.3 — indirect
- bl@5.1.0 — indirect
- buffer@6.0.3 — indirect
- varint@6.0.0 — indirect
- @types/bl@4.1.0 — indirect
- abortable-iterator@3.0.2 — indirect
- chai@4.5.0 — indirect
- chai-checkmark@1.0.1 — indirect
- delay@5.0.0 — indirect
- detect-node@2.1.0 — indirect
- dirty-chai@2.0.1 — indirect
- err-code@3.0.1 — indirect
- it-goodbye@3.0.0 — indirect
- it-pair@1.0.0 — indirect
- it-pushable@1.4.2 — indirect
- libp2p-crypto@0.19.7 — indirect
- libp2p-tcp@0.15.4 — indirect
- p-defer@3.0.0 — indirect
- p-limit@3.1.0 — indirect
- p-wait-for@3.2.0 — indirect
- peer-id@0.14.8 — indirect
- sinon@10.0.1 — indirect
- dns-over-http-resolver@1.2.3 — indirect
- is-ip@3.1.0 — indirect
- uint8arrays@3.1.1 — indirect
- blakejs@1.2.1 — indirect
- js-sha3@0.8.0 — indirect
- murmurhash3js-revisited@3.0.0 — indirect
- uint8arrays@3.1.1 — indirect
- @protobufjs/aspromise@1.1.2 — indirect
- @protobufjs/base64@1.1.2 — indirect
- @protobufjs/codegen@2.0.5 — indirect
- @protobufjs/eventemitter@1.1.1 — indirect
- @protobufjs/fetch@1.1.1 — indirect
- @protobufjs/float@1.0.2 — indirect
- @protobufjs/inquire@1.1.2 — indirect
- @protobufjs/path@1.1.2 — indirect
- @protobufjs/pool@1.1.0 — indirect
- @protobufjs/utf8@1.1.2 — indirect
- @types/long@4.0.2 — indirect
- @types/node@26.6.5 — indirect
- long@4.0.0 — indirect
- inherits@2.0.4 — indirect
- string_decoder@1.3.0 — indirect
- util-deprecate@1.0.2 — indirect
- multiformats@9.9.0 — indirect
- punycode@1.4.1 — indirect
- qs@6.17.0 — indirect
- is-arguments@1.2.0 — indirect
- is-generator-function@1.1.2 — indirect
- is-typed-array@1.1.15 — indirect
- which-typed-array@1.1.24 — indirect
- varint@5.0.2 — indirect
- @multiformats/base-x@4.0.1 — indirect
- uint8arrays@3.1.1 — indirect
- varint@5.0.2 — indirect
- base64-js@1.5.1 — indirect
- ieee754@1.2.1 — indirect
- get-iterator@1.0.2 — indirect
- assertion-error@1.1.0 — indirect
- check-error@1.0.3 — indirect
- deep-eql@4.1.4 — indirect
- get-func-name@2.0.2 — indirect
- loupe@2.3.7 — indirect
- pathval@1.1.1 — indirect
- type-detect@4.1.0 — indirect
- fast-fifo@1.3.2 — indirect
- is-typedarray@1.0.0 — indirect
- iso-random-stream@2.0.2 — indirect
- keypair@1.0.4 — indirect
- node-forge@0.10.0 — indirect
- pem-jwk@2.0.0 — indirect
- secp256k1@4.0.5 — indirect
- uint8arrays@3.1.1 — indirect
- ursa-optional@0.10.2 — indirect
- class-is@1.1.0 — indirect
- libp2p-utils@0.3.1 — indirect
- mafmt@9.0.0 — indirect
- stream-to-it@0.2.4 — indirect
- yocto-queue@0.1.0 — indirect
- p-timeout@3.2.0 — indirect
- minimist@1.2.8 — indirect
- @sinonjs/commons@1.8.6 — indirect
- @sinonjs/fake-timers@7.1.2 — indirect
- @sinonjs/samsam@6.1.3 — indirect
- diff@4.0.4 — indirect
- nise@5.1.9 — indirect
- supports-color@7.2.0 — indirect
- native-fetch@3.0.0 — indirect
- receptacle@1.3.2 — indirect
- ip-regex@4.3.0 — indirect
- undici-types@8.9.0 — indirect
- safe-buffer@5.2.1 — indirect
- es-define-property@1.0.1 — indirect
- side-channel@1.1.1 — indirect
- call-bound@1.0.4 — indirect
- has-tostringtag@1.0.2 — indirect
- generator-function@2.0.1 — indirect
- get-proto@1.0.1 — indirect
- safe-regex-test@1.1.0 — indirect
- available-typed-arrays@1.0.7 — indirect
- call-bind@1.0.9 — indirect
- for-each@0.3.5 — indirect
- gopd@1.2.0 — indirect
- events@3.3.0 — indirect
- asn1.js@5.4.1 — indirect
- elliptic@6.6.1 — indirect
- node-addon-api@5.1.0 — indirect
- node-gyp-build@4.8.4 — indirect
- bindings@1.5.0 — indirect
- nan@2.30.0 — indirect
- ip-address@7.1.0 — indirect
- is-loopback-addr@1.0.1 — indirect
- private-ip@2.3.4 — indirect
- p-finally@1.0.0 — indirect
- type-detect@4.0.8 — indirect
- lodash.get@4.4.2 — indirect
- @sinonjs/commons@3.0.1 — indirect
- @sinonjs/fake-timers@11.3.1 — indirect
- @sinonjs/text-encoding@0.7.3 — indirect
- just-extend@6.2.0 — indirect
- path-to-regexp@6.3.0 — indirect
- has-flag@4.0.0 — indirect
- es-errors@1.3.0 — indirect
- object-inspect@1.13.4 — indirect
- side-channel-list@1.0.1 — indirect
- side-channel-map@1.0.1 — indirect
- side-channel-weakmap@1.0.2 — indirect
- call-bind-apply-helpers@1.0.2 — indirect
- get-intrinsic@1.3.1 — indirect
- has-symbols@1.1.0 — indirect
- dunder-proto@1.0.1 — indirect
- es-object-atoms@1.1.2 — indirect
- is-regex@1.2.1 — indirect
- possible-typed-array-names@1.1.0 — indirect
- set-function-length@1.2.2 — indirect
- is-callable@1.2.7 — indirect
- bn.js@4.12.5 — indirect
- minimalistic-assert@1.0.1 — indirect
- safer-buffer@2.1.2 — indirect
- brorand@1.1.0 — indirect
- hash.js@1.1.7 — indirect
- hmac-drbg@1.0.1 — indirect
- minimalistic-crypto-utils@1.0.1 — indirect
- file-uri-to-path@1.0.0 — indirect
- jsbn@1.1.0 — indirect
- sprintf-js@1.1.2 — indirect
- ipaddr.js@2.5.0 — indirect
- netmask@2.1.1 — indirect
- type-detect@4.0.8 — indirect
- function-bind@1.1.2 — indirect
- async-function@1.0.0 — indirect
- async-generator-function@1.0.0 — indirect
- hasown@2.0.4 — indirect
- math-intrinsics@1.1.0 — indirect
- define-data-property@1.1.4 — indirect
- has-property-descriptors@1.0.2 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Maintained | 0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
|---|---|
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| Code-Review | 0/10 — Found 2/23 approved changesets -- score normalized to 0 |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Pinned-Dependencies | 0/10 — dependency not pinned by hash detected -- score normalized to 0 |
| Token-Permissions | 0/10 — detected GitHub workflow tokens with excessive permissions |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| Fuzzing | 0/10 — project is not fuzzed |
| License | 9/10 — license file detected |
| Branch-Protection | 0/10 — branch protection not enabled on development/release branches |
| Security-Policy | 10/10 — security policy file detected |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
Evidence and freshness
- https://registry.npmjs.org/ipfs-bitswap/5.0.3 — retrieved 2026-10-29T23:51:56.244Z
- https://api.deps.dev/v3/projects/github.com%2Fipfs%2Fjs-ipfs-bitswap — retrieved 2026-10-29T21:41:53.181Z
- https://api.deps.dev/v3/systems/npm/packages/ipfs-bitswap/versions/5.0.3 — retrieved 2026-10-29T23:51:56.762Z
- https://api.deps.dev/v3/systems/npm/packages/ipfs-bitswap/versions/5.0.3:dependencies — retrieved 2026-10-29T23:51:56.805Z