libp2p 1.9.4
JavaScript implementation of libp2p, a modular peer to peer network stack
libp2p@1.9.4 was published on 2024-09-05. Its manifest declares 26 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.
All libp2p versions · Permanent reference to 1.9.4 · Latest release
Package specifications
| Version | 1.9.4 |
|---|---|
| License declaration | Apache-2.0 OR MIT |
| Published | 2024-09-05T16:49:03.315Z |
| Node.js requirement | Not declared |
| Type declarations | Bundled declarations |
| Runtime dependency count | 26 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 873.00 KiB |
| Published file count | 141 |
| Package type | module |
| ES module entry | Not declared |
| Default entry | Not declared |
| Side effects declaration | false |
| Direct advisories | 0 |
| Resolved graph dependencies | 86 |
| Repository stars | 2586 |
| Repository forks | 556 |
Install libp2p 1.9.4
npm install libp2p@1.9.4 pnpm add libp2p@1.9.4 yarn add libp2p@1.9.4
Runtime dependencies
- p-defer ^4.0.1
- it-merge ^3.0.5
- any-signal ^4.1.1
- race-event ^1.3.0
- it-parallel ^3.0.7
- race-signal ^1.0.2
- uint8arrays ^5.1.0
- multiformats ^13.1.0
- @libp2p/utils ^5.4.9
- merge-options ^3.0.4
- @libp2p/crypto ^4.1.9
- @libp2p/logger ^4.0.20
- datastore-core ^9.2.9
- it-byte-stream ^1.0.12
- @libp2p/peer-id ^4.2.4
- progress-events ^1.0.0
- @libp2p/interface ^1.7.0
- @multiformats/dns ^1.0.6
- @libp2p/peer-store ^10.1.5
- interface-datastore ^8.2.11
- @libp2p/peer-id-factory ^4.2.4
- @multiformats/multiaddr ^12.2.3
- @libp2p/peer-collections ^5.2.9
- @libp2p/interface-internal ^1.3.4
- @libp2p/multistream-select ^5.1.17
- @multiformats/multiaddr-matcher ^1.2.1
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- @libp2p/crypto@4.1.9 — direct
- @libp2p/interface@1.7.0 — direct
- @libp2p/interface-internal@1.3.4 — direct
- @libp2p/logger@4.0.20 — direct
- @libp2p/multistream-select@5.1.17 — direct
- @libp2p/peer-collections@5.2.9 — direct
- @libp2p/peer-id@4.2.4 — direct
- @libp2p/peer-id-factory@4.2.4 — direct
- @libp2p/peer-store@10.1.5 — direct
- @libp2p/utils@5.4.9 — direct
- @multiformats/dns@1.0.15 — direct
- @multiformats/multiaddr@12.5.1 — direct
- @multiformats/multiaddr-matcher@1.8.0 — direct
- any-signal@4.2.0 — direct
- datastore-core@9.2.9 — direct
- interface-datastore@8.3.2 — direct
- it-byte-stream@1.1.1 — direct
- it-merge@3.0.15 — direct
- it-parallel@3.0.16 — direct
- merge-options@3.0.4 — direct
- multiformats@13.4.2 — direct
- p-defer@4.0.1 — direct
- progress-events@1.1.0 — direct
- race-event@1.6.1 — direct
- race-signal@1.1.3 — direct
- uint8arrays@5.1.1 — direct
- @noble/curves@1.9.7 — indirect
- @noble/hashes@1.8.0 — indirect
- asn1js@3.1.0 — indirect
- protons-runtime@5.6.0 — indirect
- uint8arraylist@2.4.9 — indirect
- it-pushable@3.2.4 — indirect
- it-stream-types@2.0.4 — indirect
- weald@1.1.3 — indirect
- it-length-prefixed@9.1.1 — indirect
- it-length-prefixed-stream@1.2.1 — indirect
- uint8-varint@2.0.5 — indirect
- @libp2p/peer-record@7.0.25 — indirect
- it-all@3.0.11 — indirect
- mortice@3.3.1 — indirect
- @chainsafe/is-ip@2.1.0 — indirect
- @sindresorhus/fnv1a@3.1.0 — indirect
- @types/murmurhash3js-revisited@3.0.3 — indirect
- delay@6.0.0 — indirect
- get-iterator@2.0.1 — indirect
- is-loopback-addr@2.1.0 — indirect
- murmurhash3js-revisited@3.0.0 — indirect
- netmask@2.1.1 — indirect
- @dnsquery/dns-packet@6.1.1 — indirect
- @libp2p/interface@3.4.0 — indirect
- hashlru@2.3.0 — indirect
- p-queue@9.3.5 — indirect
- uint8arrays@6.1.1 — indirect
- @chainsafe/netmask@2.0.0 — indirect
- abort-error@1.0.2 — indirect
- err-code@3.0.1 — indirect
- interface-store@5.1.8 — indirect
- it-drain@3.0.12 — indirect
- it-filter@3.1.6 — indirect
- it-map@3.1.6 — indirect
- it-pipe@3.0.1 — indirect
- it-sort@3.0.11 — indirect
- it-take@3.0.11 — indirect
- interface-store@6.0.3 — indirect
- it-queueless-pushable@1.0.2 — indirect
- it-queueless-pushable@2.0.5 — indirect
- is-plain-obj@2.1.0 — indirect
- pvtsutils@1.3.6 — indirect
- pvutils@1.2.0 — indirect
- tslib@2.8.1 — indirect
- ms@4.0.0-nightly.202508271359 — indirect
- supports-color@10.2.2 — indirect
- it-reader@6.0.5 — indirect
- it-queue@1.1.4 — indirect
- main-event@1.0.5 — indirect
- @leichtgewicht/ip-codec@2.0.5 — indirect
- utf8-codec@1.0.0 — indirect
- @multiformats/multiaddr@13.0.3 — indirect
- multiformats@14.0.5 — indirect
- uint8arraylist@3.0.2 — indirect
- eventemitter3@5.0.4 — indirect
- p-timeout@7.0.2 — indirect
- it-peekable@3.0.10 — indirect
- race-signal@2.0.2 — indirect
- race-signal@2.0.2 — indirect
- uint8-varint@3.0.0 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 2/10 — Found 5/20 approved changesets -- score normalized to 2 |
|---|---|
| Maintained | 10/10 — 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| Security-Policy | 10/10 — security policy file detected |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| Token-Permissions | 0/10 — detected GitHub workflow tokens with excessive permissions |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| License | 10/10 — license file detected |
| Branch-Protection | 5/10 — branch protection is not maximal on development and all release branches |
| Pinned-Dependencies | 2/10 — dependency not pinned by hash detected -- score normalized to 2 |
| Fuzzing | 0/10 — project is not fuzzed |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
Evidence and freshness
- https://registry.npmjs.org/libp2p/1.9.4 — retrieved 2026-10-29T10:31:57.334Z
- https://api.deps.dev/v3/systems/npm/packages/libp2p/versions/1.9.4:dependencies — retrieved 2026-10-29T10:31:57.872Z
- https://api.deps.dev/v3/systems/npm/packages/libp2p/versions/1.9.4 — retrieved 2026-10-29T10:31:57.870Z
- https://api.deps.dev/v3/projects/github.com%2Flibp2p%2Fjs-libp2p — retrieved 2026-10-29T09:36:09.937Z