ipfs 0.16.0

JavaScript implementation of the IPFS specification

ipfs@0.16.0 was published on 2016-09-15. Its manifest declares 53 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

Deprecated: js-IPFS has been deprecated in favour of Helia - please see https://github.com/ipfs/js-ipfs/issues/4336 for details

All ipfs versions · Permanent reference to 0.16.0 · Latest release

Package specifications

Version	0.16.0
License declaration	MIT
Published	2016-09-15T18:48:22.284Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	53
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	lib/core/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	507
Repository stars	7386
Repository forks	1201

Install ipfs 0.16.0

npm install ipfs@0.16.0
pnpm add ipfs@0.16.0
yarn add ipfs@0.16.0

Runtime dependencies

babel-runtime ^6.11.6
bl ^1.1.2
boom ^4.0.0
bs58 ^3.0.0
debug ^2.2.0
detect-node ^2.0.3
glob ^7.0.6
hapi ^15.0.3
ipfs-api ^9.0.0
ipfs-bitswap ^0.7.0
ipfs-block ^0.3.0
ipfs-block-service ^0.5.0
ipfs-merkle-dag ^0.7.3
ipfs-multipart ^0.1.0
ipfs-repo ^0.9.0
ipfs-unixfs ^0.1.4
ipfs-unixfs-engine ^0.11.3
isstream ^0.1.2
joi ^9.0.4
libp2p-ipfs ^0.14.1
libp2p-ipfs-browser ^0.15.1
lodash.flatmap ^4.5.0
lodash.get ^4.4.2
lodash.has ^4.5.2
lodash.set ^4.3.2
lodash.sortby ^4.7.0
lodash.values ^4.3.0
mafmt ^2.1.2
map-limit 0.0.1
multiaddr ^2.0.3
multihashes ^0.2.2
path-exists ^3.0.0
peer-book ^0.3.0
peer-id ^0.7.0
peer-info ^0.7.1
promisify-es6 ^1.0.1
pull-file ^1.0.0
pull-paramap ^1.1.6
pull-pushable ^2.0.1
pull-sort ^1.0.0
pull-stream ^3.4.5
pull-stream-to-stream ^1.3.3
pull-zip ^2.0.0
read-pkg-up ^1.0.1
run-parallel ^1.1.6
run-parallel-limit ^1.0.3
run-series ^1.1.4
run-waterfall ^1.1.3
stream-to-pull-stream ^1.7.0
temp ^0.8.3
through2 ^2.0.1
update-notifier ^1.0.2
yargs ^5.0.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

babel-runtime@6.26.0 — direct
bl@1.2.3 — direct
boom@4.3.1 — direct
bs58@3.1.0 — direct
debug@2.6.9 — direct
detect-node@2.1.0 — direct
glob@7.2.3 — direct
hapi@15.2.0 — direct
ipfs-api@9.0.0 — direct
ipfs-bitswap@0.7.1 — direct
ipfs-block@0.3.0 — direct
ipfs-block-service@0.5.0 — direct
ipfs-merkle-dag@0.7.3 — direct
ipfs-multipart@0.1.1 — direct
ipfs-repo@0.9.1 — direct
ipfs-unixfs@0.1.16 — direct
ipfs-unixfs-engine@0.11.4 — direct
isstream@0.1.2 — direct
joi@9.2.0 — direct
libp2p-ipfs@0.14.1 — direct
libp2p-ipfs-browser@0.15.1 — direct
lodash.flatmap@4.5.0 — direct
lodash.get@4.4.2 — direct
lodash.has@4.5.2 — direct
lodash.set@4.3.2 — direct
lodash.sortby@4.7.0 — direct
lodash.values@4.3.0 — direct
mafmt@2.1.8 — direct
map-limit@0.0.1 — direct
multiaddr@2.3.0 — direct
multihashes@0.2.2 — direct
path-exists@3.0.0 — direct
peer-book@0.3.2 — direct
peer-id@0.7.0 — direct
peer-info@0.7.1 — direct
promisify-es6@1.0.3 — direct
pull-file@1.1.0 — direct
pull-paramap@1.2.2 — direct
pull-pushable@2.2.0 — direct
pull-sort@1.0.2 — direct
pull-stream@3.7.0 — direct
pull-stream-to-stream@1.3.4 — direct
pull-zip@2.0.1 — direct
read-pkg-up@1.0.1 — direct
run-parallel@1.2.0 — direct
run-parallel-limit@1.1.0 — direct
run-series@1.1.9 — direct
run-waterfall@1.1.7 — direct
stream-to-pull-stream@1.7.3 — direct
temp@0.8.4 — direct
through2@2.0.5 — direct
update-notifier@1.0.3 — direct
yargs@5.0.0 — direct
core-js@2.6.12 — indirect
regenerator-runtime@0.11.1 — indirect
readable-stream@2.3.8 — indirect
safe-buffer@5.2.1 — indirect
hoek@4.3.1 — indirect
base-x@1.1.0 — indirect
ms@2.0.0 — indirect
fs.realpath@1.0.0 — indirect
inflight@1.0.6 — indirect
inherits@2.0.4 — indirect
minimatch@3.1.5 — indirect
once@1.4.0 — indirect
path-is-absolute@1.0.1 — indirect
accept@2.2.3 — indirect
ammo@2.1.2 — indirect
call@3.0.4 — indirect
catbox@7.2.1 — indirect
catbox-memory@2.1.1 — indirect
cryptiles@3.2.1 — indirect
heavy@4.1.1 — indirect
iron@4.1.1 — indirect
items@2.2.1 — indirect
mimos@3.1.1 — indirect
podium@1.4.1 — indirect
shot@3.5.2 — indirect
statehood@5.1.1 — indirect
subtext@4.4.1 — indirect
topo@2.1.1 — indirect
async@2.6.4 — indirect
flatmap@0.0.3 — indirect
is-ipfs@0.2.1 — indirect
multipart-stream@2.0.1 — indirect
ndjson@1.5.0 — indirect
qs@6.17.1 — indirect
streamifier@0.1.1 — indirect
tar-stream@1.6.2 — indirect
wreck@10.0.0 — indirect
heap@0.2.7 — indirect
lodash.isequalwith@4.4.0 — indirect
lodash.isundefined@3.0.1 — indirect
protocol-buffers@3.2.1 — indirect
pull-defer@0.2.3 — indirect
pull-generate@2.2.0 — indirect
pull-length-prefixed@1.3.3 — indirect
multihashing@0.2.3 — indirect
pull-traverse@1.0.3 — indirect
stable@0.1.8 — indirect
@hapi/content@4.1.1 — indirect
dicer@0.3.1 — indirect
base32.js@0.1.0 — indirect
lock@0.1.4 — indirect
pull-write@1.1.4 — indirect
protons@1.2.1 — indirect
pull-block@1.4.0 — indirect
isemail@2.2.1 — indirect
moment@2.31.0 — indirect
libp2p-secio@0.5.0 — indirect
libp2p-spdy@0.9.0 — indirect
libp2p-swarm@0.23.0 — indirect
libp2p-tcp@0.8.1 — indirect
libp2p-websockets@0.8.1 — indirect
libp2p-webrtc-star@0.4.5 — indirect
once@1.3.3 — indirect
bs58@4.0.1 — indirect
ip@1.1.9 — indirect
lodash.filter@4.6.0 — indirect
lodash.map@4.6.0 — indirect
varint@5.0.2 — indirect
xtend@4.0.2 — indirect
bs58@4.0.1 — indirect
libp2p-crypto@0.5.0 — indirect
pull-utf8-decoder@1.0.2 — indirect
looper@4.0.0 — indirect
find-up@1.1.2 — indirect
read-pkg@1.1.0 — indirect
queue-microtask@1.2.3 — indirect
looper@3.0.0 — indirect
rimraf@2.6.3 — indirect
boxen@0.6.0 — indirect
chalk@1.1.3 — indirect
configstore@2.1.0 — indirect
is-npm@1.0.0 — indirect
latest-version@2.0.0 — indirect
lazy-req@1.1.0 — indirect
semver-diff@2.1.0 — indirect
xdg-basedir@2.0.0 — indirect
cliui@3.2.0 — indirect
decamelize@1.2.0 — indirect
get-caller-file@1.0.3 — indirect
lodash.assign@4.2.0 — indirect
os-locale@1.4.0 — indirect
require-directory@2.1.1 — indirect
require-main-filename@1.0.1 — indirect
set-blocking@2.0.0 — indirect
string-width@1.0.2 — indirect
which-module@1.0.0 — indirect
window-size@0.2.0 — indirect
y18n@3.2.2 — indirect
yargs-parser@3.2.0 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
wrappy@1.0.2 — indirect
brace-expansion@1.1.21 — indirect
boom@5.3.3 — indirect
boom@5.3.3 — indirect
boom@5.3.3 — indirect
joi@12.1.1 — indirect
boom@5.3.3 — indirect
boom@5.3.3 — indirect
joi@12.1.1 — indirect
boom@5.3.3 — indirect
mime-db@1.54.0 — indirect
joi@12.1.1 — indirect
joi@12.1.1 — indirect
boom@5.3.3 — indirect
bourne@1.3.3 — indirect
joi@12.1.1 — indirect
boom@5.3.3 — indirect
content@3.1.2 — indirect
pez@2.2.2 — indirect
wreck@12.6.2 — indirect
lodash@4.18.1 — indirect
is-stream@1.1.0 — indirect
sandwich-stream@1.0.0 — indirect
json-stringify-safe@5.0.1 — indirect
minimist@1.2.8 — indirect
split2@2.2.0 — indirect
es-define-property@1.0.1 — indirect
side-channel@1.1.1 — indirect
buffer-alloc@1.2.0 — indirect
end-of-stream@1.4.5 — indirect
fs-constants@1.0.0 — indirect
to-buffer@1.2.2 — indirect
brfs@1.6.1 — indirect
generate-function@2.3.1 — indirect
generate-object-property@1.2.0 — indirect
protocol-buffers-schema@3.6.1 — indirect
signed-varint@2.0.1 — indirect
pull-reader@1.3.1 — indirect
multihashes@0.3.3 — indirect
webcrypto@0.1.1 — indirect
@hapi/boom@7.4.11 — indirect
streamsearch@1.1.0 — indirect
pull-cat@1.1.11 — indirect
buffer@5.7.1 — indirect
pull-through@1.0.18 — indirect
interface-connection@0.2.1 — indirect
libp2p-crypto@0.6.1 — indirect
node-forge@0.6.49 — indirect
pull-handshake@1.1.4 — indirect
lodash.noop@3.0.1 — indirect
spdy-transport@2.1.1 — indirect
ip-address@5.9.4 — indirect
libp2p-identify@0.2.0 — indirect
lodash.contains@2.4.3 — indirect
multistream-select@0.11.1 — indirect
pull@2.1.1 — indirect
pull-ws@3.3.2 — indirect
simple-peer@6.4.4 — indirect
socket.io@1.7.4 — indirect
socket.io-client@1.7.4 — indirect
base-x@3.0.11 — indirect
base-x@3.0.11 — indirect
elliptic@6.6.1 — indirect
path-exists@2.1.0 — indirect
pinkie-promise@2.0.1 — indirect
load-json-file@1.1.0 — indirect
normalize-package-data@2.5.0 — indirect
path-type@1.1.0 — indirect
ansi-align@1.1.0 — indirect
camelcase@2.1.1 — indirect
cli-boxes@1.0.0 — indirect
filled-array@1.1.0 — indirect
object-assign@4.1.0 — indirect
repeating@2.0.1 — indirect
widest-line@1.0.0 — indirect
ansi-styles@2.2.1 — indirect
escape-string-regexp@1.0.5 — indirect
has-ansi@2.0.0 — indirect
strip-ansi@3.0.1 — indirect
supports-color@2.0.0 — indirect
dot-prop@3.0.0 — indirect
graceful-fs@4.2.11 — indirect
mkdirp@0.5.6 — indirect
os-tmpdir@1.0.2 — indirect
osenv@0.1.5 — indirect
uuid@2.0.3 — indirect
write-file-atomic@1.3.4 — indirect
package-json@2.4.0 — indirect
semver@5.7.2 — indirect
os-homedir@1.0.2 — indirect
wrap-ansi@2.1.0 — indirect
lcid@1.0.0 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
camelcase@3.0.0 — indirect
safe-buffer@5.1.2 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
@hapi/address@1.0.1 — indirect
boom@5.3.3 — indirect
b64@3.1.1 — indirect
boom@5.3.3 — indirect
nigel@2.1.1 — indirect
boom@5.3.3 — indirect
es-errors@1.3.0 — indirect
object-inspect@1.13.4 — indirect
side-channel-list@1.0.1 — indirect
side-channel-map@1.0.1 — indirect
side-channel-weakmap@1.0.2 — indirect
buffer-alloc-unsafe@1.1.0 — indirect
buffer-fill@1.0.0 — indirect
isarray@2.0.5 — indirect
typed-array-buffer@1.0.3 — indirect
quote-stream@1.0.2 — indirect
resolve@1.22.13 — indirect
static-module@2.2.5 — indirect
is-property@1.0.2 — indirect
bs58@4.0.1 — indirect
crypto-browserify@3.12.1 — indirect
@hapi/hoek@8.5.1 — indirect
base64-js@1.5.1 — indirect
ieee754@1.2.1 — indirect
looper@3.0.0 — indirect
timed-tape@0.1.1 — indirect
pull-pair@1.1.0 — indirect
hpack.js@2.1.6 — indirect
obuf@1.1.2 — indirect
wbuf@1.7.3 — indirect
jsbn@1.1.0 — indirect
sprintf-js@1.1.2 — indirect
lodash._baseindexof@2.4.1 — indirect
lodash.forown@2.4.1 — indirect
lodash.isarray@2.4.1 — indirect
lodash.isstring@2.4.1 — indirect
lodash.isfunction@3.0.9 — indirect
lodash.range@3.2.0 — indirect
varint@4.0.1 — indirect
relative-url@1.0.2 — indirect
ws@1.1.5 — indirect
get-browser-rtc@1.1.0 — indirect
randombytes@2.1.0 — indirect
debug@2.3.3 — indirect
engine.io@1.8.5 — indirect
has-binary@0.1.7 — indirect
socket.io-adapter@0.5.0 — indirect
socket.io-parser@2.3.1 — indirect
backo2@1.0.2 — indirect
component-bind@1.0.0 — indirect
component-emitter@1.2.1 — indirect
debug@2.3.3 — indirect
engine.io-client@1.8.6 — indirect
indexof@0.0.1 — indirect
object-component@0.0.3 — indirect
parseuri@0.0.5 — indirect
to-array@0.1.4 — indirect
bn.js@4.12.5 — indirect
brorand@1.1.0 — indirect
hash.js@1.1.7 — indirect
hmac-drbg@1.0.1 — indirect
minimalistic-assert@1.0.1 — indirect
minimalistic-crypto-utils@1.0.1 — indirect
pinkie@2.0.4 — indirect
parse-json@2.2.0 — indirect
pify@2.3.0 — indirect
strip-bom@2.0.0 — indirect
hosted-git-info@2.8.9 — indirect
validate-npm-package-license@3.0.4 — indirect
is-finite@1.1.0 — indirect
ansi-regex@2.1.1 — indirect
is-obj@1.0.1 — indirect
imurmurhash@0.1.4 — indirect
slide@1.1.6 — indirect
got@5.7.1 — indirect
registry-auth-token@3.4.0 — indirect
registry-url@3.1.0 — indirect
invert-kv@1.0.0 — indirect
number-is-nan@1.0.1 — indirect
vise@2.1.1 — indirect
object-inspect@1.13.4 — indirect
call-bound@1.0.4 — indirect
get-intrinsic@1.3.1 — indirect
object-inspect@1.13.4 — indirect
object-inspect@1.13.4 — indirect
is-typed-array@1.1.15 — indirect
buffer-equal@0.0.1 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
concat-stream@1.6.2 — indirect
convert-source-map@1.9.0 — indirect
duplexer2@0.1.4 — indirect
escodegen@1.9.1 — indirect
falafel@2.2.5 — indirect
has@1.0.4 — indirect
magic-string@0.22.5 — indirect
merge-source-map@1.0.4 — indirect
object-inspect@1.4.1 — indirect
shallow-copy@0.0.1 — indirect
static-eval@2.1.1 — indirect
base-x@3.0.11 — indirect
browserify-cipher@1.0.1 — indirect
browserify-sign@4.2.6 — indirect
create-ecdh@4.0.4 — indirect
create-hash@1.2.0 — indirect
create-hmac@1.1.7 — indirect
diffie-hellman@5.0.3 — indirect
hash-base@3.0.5 — indirect
pbkdf2@3.1.7 — indirect
public-encrypt@4.0.3 — indirect
randomfill@1.0.4 — indirect
lodash._basecreatecallback@2.4.1 — indirect
lodash._objecttypes@2.4.1 — indirect
lodash.keys@2.4.1 — indirect
lodash._isnative@2.4.1 — indirect
options@0.0.6 — indirect
ultron@1.0.2 — indirect
ms@0.7.2 — indirect
accepts@1.3.3 — indirect
base64id@1.0.0 — indirect
cookie@0.3.1 — indirect
debug@2.3.3 — indirect
engine.io-parser@1.3.2 — indirect
isarray@0.0.1 — indirect
debug@2.3.3 — indirect
component-emitter@1.1.2 — indirect
debug@2.2.0 — indirect
isarray@0.0.1 — indirect
json3@3.3.2 — indirect
ms@0.7.2 — indirect
component-emitter@1.2.1 — indirect
component-inherit@0.0.3 — indirect
debug@2.3.3 — indirect
has-cors@1.1.0 — indirect
parsejson@0.0.3 — indirect
parseqs@0.0.5 — indirect
xmlhttprequest-ssl@1.6.3 — indirect
yeast@0.1.2 — indirect
better-assert@1.0.2 — indirect
error-ex@1.3.4 — indirect
is-utf8@0.2.1 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
create-error-class@3.0.2 — indirect
is-redirect@1.0.0 — indirect
is-retry-allowed@1.2.0 — indirect
lowercase-keys@1.0.1 — indirect
node-status-codes@1.0.0 — indirect
read-all-stream@3.1.0 — indirect
timed-out@3.1.3 — indirect
unzip-response@1.0.2 — indirect
url-parse-lax@1.0.0 — indirect
rc@1.2.8 — indirect
call-bind-apply-helpers@1.0.2 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
es-object-atoms@1.1.2 — indirect
function-bind@1.1.2 — indirect
generator-function@2.0.1 — indirect
get-proto@1.0.1 — indirect
gopd@1.2.0 — indirect
has-symbols@1.1.0 — indirect
hasown@2.0.4 — indirect
math-intrinsics@1.1.0 — indirect
which-typed-array@1.1.24 — indirect
buffer-from@1.1.2 — indirect
typedarray@0.0.6 — indirect
esprima@3.1.3 — indirect
estraverse@4.3.0 — indirect
esutils@2.0.3 — indirect
optionator@0.8.3 — indirect
source-map@0.6.1 — indirect
acorn@7.4.1 — indirect
isarray@2.0.5 — indirect
vlq@0.2.3 — indirect
source-map@0.5.7 — indirect
escodegen@2.1.0 — indirect
browserify-aes@1.2.0 — indirect
browserify-des@1.0.2 — indirect
evp_bytestokey@1.0.3 — indirect
bn.js@5.2.5 — indirect
browserify-rsa@4.1.1 — indirect
parse-asn1@5.1.10 — indirect
bn.js@4.12.5 — indirect
cipher-base@1.0.7 — indirect
md5.js@1.3.5 — indirect
ripemd160@2.0.3 — indirect
sha.js@2.4.12 — indirect
bn.js@4.12.5 — indirect
miller-rabin@4.0.1 — indirect
bn.js@4.12.5 — indirect
lodash._setbinddata@2.4.1 — indirect
lodash.bind@2.4.1 — indirect
lodash.identity@2.4.1 — indirect
lodash.support@2.4.1 — indirect
lodash._shimkeys@2.4.1 — indirect
lodash.isobject@2.4.1 — indirect
mime-types@2.1.35 — indirect
negotiator@0.6.1 — indirect
ms@0.7.2 — indirect
after@0.8.2 — indirect
arraybuffer.slice@0.0.6 — indirect
base64-arraybuffer@0.1.5 — indirect
blob@0.0.4 — indirect
wtf-8@1.0.0 — indirect
ms@0.7.2 — indirect
ms@0.7.1 — indirect
ms@0.7.2 — indirect
callsite@1.0.0 — indirect
is-arrayish@0.2.1 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
capture-stack-trace@1.0.2 — indirect
prepend-http@1.0.4 — indirect
deep-extend@0.6.0 — indirect
ini@1.3.8 — indirect
strip-json-comments@2.0.1 — indirect
dunder-proto@1.0.1 — indirect
available-typed-arrays@1.0.7 — indirect
call-bind@1.0.9 — indirect
for-each@0.3.5 — indirect
has-tostringtag@1.0.2 — indirect
deep-is@0.1.4 — indirect
fast-levenshtein@2.0.6 — indirect
levn@0.3.0 — indirect
prelude-ls@1.1.2 — indirect
type-check@0.3.2 — indirect
word-wrap@1.2.5 — indirect
esprima@4.0.1 — indirect
estraverse@5.3.0 — indirect
buffer-xor@1.0.3 — indirect
des.js@1.1.0 — indirect
asn1.js@4.10.1 — indirect
hash-base@3.1.2 — indirect
bn.js@4.12.5 — indirect
lodash.noop@2.4.1 — indirect
lodash._createwrapper@2.4.1 — indirect
lodash._slice@2.4.1 — indirect
mime-db@1.52.0 — indirect
possible-typed-array-names@1.1.0 — indirect
set-function-length@1.2.2 — indirect
is-callable@1.2.7 — indirect
bn.js@4.12.5 — indirect
lodash._basebind@2.4.1 — indirect
lodash._basecreatewrapper@2.4.1 — indirect
lodash.isfunction@2.4.1 — indirect
define-data-property@1.1.4 — indirect
has-property-descriptors@1.0.2 — indirect
lodash._basecreate@2.4.1 — indirect
lodash.noop@2.4.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	1/10 — Found 4/27 approved changesets -- score normalized to 1
Maintained	0/10 — project is archived
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
License	9/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Branch-Protection	0/10 — branch protection not enabled on development/release branches
Security-Policy	10/10 — security policy file detected
Pinned-Dependencies	2/10 — dependency not pinned by hash detected -- score normalized to 2
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/ipfs/0.16.0 — retrieved 2026-10-30T20:43:47.865Z
https://api.deps.dev/v3/systems/npm/packages/ipfs/versions/0.16.0 — retrieved 2026-10-30T20:43:48.349Z
https://api.deps.dev/v3/systems/npm/packages/ipfs/versions/0.16.0:dependencies — retrieved 2026-10-30T20:43:48.349Z
https://api.deps.dev/v3/projects/github.com%2Fipfs%2Fjs-ipfs — retrieved 2026-10-30T19:24:36.809Z