koa-router 4.0.0

Router middleware for koa. Provides RESTful resource routing.

koa-router@4.0.0 was published on 2015-02-10. Its manifest declares 8 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is > 0.11.4.

Deprecated: Please use @koa/router instead, starting from v9!

All koa-router versions · Permanent reference to 4.0.0 · Latest release

Package specifications

Version	4.0.0
License declaration	MIT
Published	2015-02-10T08:05:45.084Z
Node.js requirement	> 0.11.4
Type declarations	Not declared
Runtime dependency count	8
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	lib/router.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	347
Repository stars	911
Repository forks	181

Install koa-router 4.0.0

npm install koa-router@4.0.0
pnpm add koa-router@4.0.0
yarn add koa-router@4.0.0

Runtime dependencies

gulp ^3.8.11
debug ^2.1.0
methods ^1.0.1
gulp-mocha ^2.0.0
http-errors ^1.3.1
koa-compose ^2.3.0
path-to-regexp ^1.0.0
jsdoc-to-markdown ^0.6.3

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

debug@2.6.9 — direct
gulp@3.9.1 — direct
gulp-mocha@2.2.0 — direct
http-errors@1.8.1 — direct
jsdoc-to-markdown@0.6.4 — direct
koa-compose@2.5.1 — direct
methods@1.1.2 — direct
path-to-regexp@1.9.0 — direct
ms@2.0.0 — indirect
archy@1.0.0 — indirect
chalk@1.1.3 — indirect
deprecated@0.0.1 — indirect
gulp-util@3.0.8 — indirect
interpret@1.4.0 — indirect
liftoff@2.5.0 — indirect
minimist@1.2.8 — indirect
orchestrator@0.3.8 — indirect
pretty-hrtime@1.0.3 — indirect
semver@4.3.6 — indirect
tildify@1.2.0 — indirect
v8flags@2.1.1 — indirect
vinyl-fs@0.3.14 — indirect
mocha@2.5.3 — indirect
plur@2.1.2 — indirect
resolve-from@1.0.1 — indirect
temp@0.8.4 — indirect
through@2.3.8 — indirect
depd@1.1.2 — indirect
inherits@2.0.4 — indirect
setprototypeof@1.2.0 — indirect
statuses@1.5.0 — indirect
toidentifier@1.0.1 — indirect
command-line-args@0.5.9 — indirect
console-dope@0.3.6 — indirect
dmd@7.0.0-3 — indirect
typical@1.0.0 — indirect
isarray@0.0.1 — indirect
ansi-styles@2.2.1 — indirect
escape-string-regexp@1.0.5 — indirect
has-ansi@2.0.0 — indirect
strip-ansi@3.0.1 — indirect
supports-color@2.0.0 — indirect
array-differ@1.0.0 — indirect
array-uniq@1.0.3 — indirect
beeper@1.1.1 — indirect
dateformat@2.2.0 — indirect
fancy-log@1.3.3 — indirect
gulplog@1.0.0 — indirect
has-gulplog@0.1.0 — indirect
lodash._reescape@3.0.0 — indirect
lodash._reevaluate@3.0.0 — indirect
lodash._reinterpolate@3.0.0 — indirect
lodash.template@3.6.2 — indirect
multipipe@0.1.2 — indirect
object-assign@3.0.0 — indirect
replace-ext@0.0.1 — indirect
through2@2.0.5 — indirect
vinyl@0.5.3 — indirect
extend@3.0.2 — indirect
findup-sync@2.0.0 — indirect
fined@1.2.0 — indirect
flagged-respawn@1.0.1 — indirect
is-plain-object@2.0.4 — indirect
object.map@1.0.1 — indirect
rechoir@0.6.2 — indirect
resolve@1.22.13 — indirect
end-of-stream@0.1.5 — indirect
sequencify@0.0.7 — indirect
stream-consume@0.1.1 — indirect
os-homedir@1.0.2 — indirect
user-home@1.1.1 — indirect
defaults@1.0.4 — indirect
glob-stream@3.1.18 — indirect
glob-watcher@0.0.6 — indirect
graceful-fs@3.0.12 — indirect
mkdirp@0.5.6 — indirect
strip-bom@1.0.0 — indirect
through2@0.6.5 — indirect
vinyl@0.4.6 — indirect
commander@2.3.0 — indirect
debug@2.2.0 — indirect
diff@1.4.0 — indirect
escape-string-regexp@1.0.2 — indirect
glob@3.2.11 — indirect
growl@1.9.2 — indirect
jade@0.26.3 — indirect
mkdirp@0.5.1 — indirect
supports-color@1.2.0 — indirect
to-iso-string@0.0.2 — indirect
irregular-plurals@1.4.0 — indirect
rimraf@2.6.3 — indirect
array-tools@1.8.6 — indirect
handlebars@3.0.8 — indirect
handlebars-ansi@0.2.0 — indirect
nature@0.5.7 — indirect
object-tools@1.6.7 — indirect
string-tools@0.1.8 — indirect
word-wrap@1.2.5 — indirect
array-back@6.2.3 — indirect
cache-point@3.0.1 — indirect
common-sequence@2.0.2 — indirect
file-set@5.3.0 — indirect
handlebars@4.7.10 — indirect
marked@14.1.4 — indirect
object-get@2.1.1 — indirect
reduce-unique@2.0.1 — indirect
test-value@3.0.0 — indirect
walk-back@5.1.2 — indirect
ansi-regex@2.1.1 — indirect
ansi-gray@0.1.1 — indirect
color-support@1.1.3 — indirect
parse-node-version@1.0.1 — indirect
time-stamp@1.1.0 — indirect
glogg@1.0.2 — indirect
sparkles@1.0.1 — indirect
lodash._basecopy@3.0.1 — indirect
lodash._basetostring@3.0.1 — indirect
lodash._basevalues@3.0.0 — indirect
lodash._isiterateecall@3.0.9 — indirect
lodash.escape@3.2.0 — indirect
lodash.keys@3.1.2 — indirect
lodash.restparam@3.6.1 — indirect
lodash.templatesettings@3.1.1 — indirect
duplexer2@0.0.2 — indirect
readable-stream@2.3.8 — indirect
xtend@4.0.2 — indirect
clone@1.0.4 — indirect
clone-stats@0.0.1 — indirect
detect-file@1.0.0 — indirect
is-glob@3.1.0 — indirect
micromatch@3.1.10 — indirect
resolve-dir@1.0.1 — indirect
expand-tilde@2.0.2 — indirect
object.defaults@1.1.0 — indirect
object.pick@1.3.0 — indirect
parse-filepath@1.0.2 — indirect
isobject@3.0.1 — indirect
for-own@1.0.0 — indirect
make-iterator@1.0.1 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
once@1.3.3 — indirect
glob@4.5.3 — indirect
glob2base@0.0.12 — indirect
minimatch@2.0.10 — indirect
ordered-read-streams@0.1.0 — indirect
through2@0.6.5 — indirect
unique-stream@1.0.0 — indirect
gaze@0.5.2 — indirect
natives@1.1.6 — indirect
first-chunk-stream@1.0.0 — indirect
is-utf8@0.2.1 — indirect
readable-stream@1.0.34 — indirect
clone@0.2.0 — indirect
ms@0.7.1 — indirect
minimatch@0.3.0 — indirect
commander@0.6.1 — indirect
mkdirp@0.3.0 — indirect
minimist@0.0.8 — indirect
glob@7.2.3 — indirect
typical@2.6.1 — indirect
optimist@0.6.1 — indirect
source-map@0.1.43 — indirect
uglify-js@2.8.29 — indirect
ansi-escape-sequences@1.0.2 — indirect
typical@2.6.1 — indirect
fast-glob@3.3.3 — indirect
neo-async@2.6.2 — indirect
source-map@0.6.1 — indirect
uglify-js@3.19.3 — indirect
wordwrap@1.0.0 — indirect
array-back@2.0.0 — indirect
typical@2.6.1 — indirect
ansi-wrap@0.1.0 — indirect
lodash._root@3.0.1 — indirect
lodash._getnative@3.9.1 — indirect
lodash.isarguments@3.1.0 — indirect
lodash.isarray@3.0.4 — indirect
readable-stream@1.1.14 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
is-extglob@2.1.1 — indirect
arr-diff@4.0.0 — indirect
array-unique@0.3.2 — indirect
braces@2.3.2 — indirect
define-property@2.0.2 — indirect
extend-shallow@3.0.2 — indirect
extglob@2.0.4 — indirect
fragment-cache@0.2.1 — indirect
kind-of@6.0.3 — indirect
nanomatch@1.2.13 — indirect
regex-not@1.0.2 — indirect
snapdragon@0.8.2 — indirect
to-regex@3.0.2 — indirect
global-modules@1.0.0 — indirect
homedir-polyfill@1.0.3 — indirect
array-each@1.0.1 — indirect
array-slice@1.1.0 — indirect
is-absolute@1.0.0 — indirect
map-cache@0.2.2 — indirect
path-root@0.1.1 — indirect
for-in@1.0.2 — indirect
hasown@2.0.4 — indirect
wrappy@1.0.2 — indirect
inflight@1.0.6 — indirect
find-index@0.1.1 — indirect
brace-expansion@1.1.21 — indirect
readable-stream@1.0.34 — indirect
globule@0.1.0 — indirect
string_decoder@0.10.31 — indirect
lru-cache@2.7.3 — indirect
sigmund@1.0.1 — indirect
fs.realpath@1.0.0 — indirect
minimatch@3.1.5 — indirect
path-is-absolute@1.0.1 — indirect
minimist@0.0.10 — indirect
wordwrap@0.0.3 — indirect
amdefine@1.0.1 — indirect
source-map@0.5.7 — indirect
uglify-to-browserify@1.0.2 — indirect
yargs@3.10.0 — indirect
@nodelib/fs.stat@2.0.5 — indirect
@nodelib/fs.walk@1.2.8 — indirect
glob-parent@5.1.2 — indirect
merge2@1.4.1 — indirect
micromatch@4.0.8 — indirect
arr-flatten@1.1.0 — indirect
extend-shallow@2.0.1 — indirect
fill-range@4.0.0 — indirect
repeat-element@1.1.4 — indirect
snapdragon-node@2.1.1 — indirect
split-string@3.1.0 — indirect
is-descriptor@1.0.4 — indirect
assign-symbols@1.0.0 — indirect
is-extendable@1.0.1 — indirect
define-property@1.0.0 — indirect
expand-brackets@2.1.4 — indirect
extend-shallow@2.0.1 — indirect
is-windows@1.0.2 — indirect
safe-regex@1.1.0 — indirect
base@0.11.2 — indirect
define-property@0.2.5 — indirect
extend-shallow@2.0.1 — indirect
source-map-resolve@0.5.3 — indirect
use@3.1.1 — indirect
global-prefix@1.0.2 — indirect
parse-passwd@1.0.0 — indirect
is-relative@1.0.0 — indirect
path-root-regex@0.1.2 — indirect
function-bind@1.1.2 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
glob@3.1.21 — indirect
lodash@1.0.2 — indirect
minimatch@0.2.14 — indirect
camelcase@1.2.1 — indirect
cliui@2.1.0 — indirect
decamelize@1.2.0 — indirect
window-size@0.1.0 — indirect
@nodelib/fs.scandir@2.1.5 — indirect
fastq@1.20.3 — indirect
is-glob@4.0.3 — indirect
braces@3.0.3 — indirect
picomatch@2.3.2 — indirect
is-extendable@0.1.1 — indirect
extend-shallow@2.0.1 — indirect
is-number@3.0.0 — indirect
repeat-string@1.6.1 — indirect
to-regex-range@2.1.1 — indirect
define-property@1.0.0 — indirect
snapdragon-util@3.0.1 — indirect
is-accessor-descriptor@1.0.2 — indirect
is-data-descriptor@1.0.1 — indirect
is-descriptor@1.0.4 — indirect
define-property@0.2.5 — indirect
extend-shallow@2.0.1 — indirect
posix-character-classes@0.1.1 — indirect
ret@0.1.15 — indirect
cache-base@1.0.1 — indirect
class-utils@0.3.6 — indirect
component-emitter@1.3.1 — indirect
define-property@1.0.0 — indirect
mixin-deep@1.3.2 — indirect
pascalcase@0.1.1 — indirect
is-descriptor@0.1.8 — indirect
atob@2.1.2 — indirect
decode-uri-component@0.2.2 — indirect
resolve-url@0.2.1 — indirect
source-map-url@0.4.1 — indirect
urix@0.1.0 — indirect
ini@1.3.8 — indirect
which@1.3.1 — indirect
is-unc-path@1.0.0 — indirect
graceful-fs@1.2.3 — indirect
inherits@1.0.2 — indirect
center-align@0.1.3 — indirect
right-align@0.1.3 — indirect
wordwrap@0.0.2 — indirect
run-parallel@1.2.0 — indirect
reusify@1.1.0 — indirect
fill-range@7.1.1 — indirect
kind-of@3.2.2 — indirect
is-descriptor@1.0.4 — indirect
kind-of@3.2.2 — indirect
collection-visit@1.0.0 — indirect
get-value@2.0.6 — indirect
has-value@1.0.0 — indirect
set-value@2.0.1 — indirect
to-object-path@0.3.0 — indirect
union-value@1.0.1 — indirect
unset-value@1.0.0 — indirect
arr-union@3.1.0 — indirect
define-property@0.2.5 — indirect
static-extend@0.1.2 — indirect
is-descriptor@1.0.4 — indirect
is-extendable@1.0.1 — indirect
isexe@2.0.0 — indirect
unc-path-regex@0.1.2 — indirect
align-text@0.1.4 — indirect
lazy-cache@1.0.4 — indirect
queue-microtask@1.2.3 — indirect
to-regex-range@5.0.1 — indirect
is-buffer@1.1.6 — indirect
map-visit@1.0.0 — indirect
object-visit@1.0.1 — indirect
has-values@1.0.0 — indirect
extend-shallow@2.0.1 — indirect
kind-of@3.2.2 — indirect
has-value@0.3.1 — indirect
define-property@0.2.5 — indirect
object-copy@0.1.0 — indirect
kind-of@3.2.2 — indirect
longest@1.0.1 — indirect
is-number@7.0.0 — indirect
kind-of@4.0.0 — indirect
has-values@0.1.4 — indirect
isobject@2.1.0 — indirect
copy-descriptor@0.1.1 — indirect
define-property@0.2.5 — indirect
kind-of@3.2.2 — indirect
isarray@1.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	9/10 — 11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Code-Review	0/10 — Found 2/25 approved changesets -- score normalized to 0
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Branch-Protection	0/10 — branch protection not enabled on development/release branches
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/koa-router/4.0.0 — retrieved 2026-10-30T14:35:24.345Z
https://api.deps.dev/v3/projects/github.com%2Fkoajs%2Frouter — retrieved 2026-10-30T11:29:16.865Z
https://api.deps.dev/v3/systems/npm/packages/koa-router/versions/4.0.0 — retrieved 2026-10-30T14:35:24.860Z
https://api.deps.dev/v3/systems/npm/packages/koa-router/versions/4.0.0:dependencies — retrieved 2026-10-30T14:35:24.887Z