Next.js 4.2.1
Minimalistic framework for server-rendered React applications
next@4.2.1 was published on 2017-12-08. Its manifest declares 55 runtime dependencies and 2 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.
All Next.js versions · Permanent reference to 4.2.1 · Latest release
Package specifications
| Version | 4.2.1 |
|---|---|
| License declaration | MIT |
| Published | 2017-12-08T23:14:36.019Z |
| Node.js requirement | Not declared |
| Type declarations | Not declared |
| Runtime dependency count | 55 |
| Peer requirement count | 2 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | Not supplied |
| Published file count | Not supplied |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | ./dist/server/next.js |
| Side effects declaration | Not declared |
| Direct advisories | Unknown |
| Resolved graph dependencies | Unknown |
| Repository stars | 143129 |
| Repository forks | 34873 |
Install Next.js 4.2.1
npm install next@4.2.1 pnpm add next@4.2.1 yarn add next@4.2.1
Runtime dependencies
- mv 2.1.1
- mz 2.7.0
- del 3.0.0
- url 0.11.0
- etag 1.8.1
- glob 7.1.2
- send 0.16.1
- uuid 3.1.0
- walk 2.3.9
- fresh 0.5.2
- touch 3.1.0
- pkg-up 2.0.0
- unfetch 3.0.0
- webpack 3.6.0
- md5-file 3.2.3
- minimist 1.2.0
- ansi-html 0.0.7
- babel-core 6.26.0
- htmlescape 1.1.1
- path-match 1.2.4
- prop-types 15.6.0
- strip-ansi 3.0.1
- styled-jsx 2.2.1
- cross-spawn 5.1.0
- http-status 1.0.1
- json-loader 0.5.7
- mkdirp-then 1.2.0
- xss-filters 1.2.7
- babel-loader 7.1.2
- glob-promise 3.2.0
- loader-utils 1.1.0
- babel-runtime 6.26.0
- babel-template 6.26.0
- recursive-copy 2.0.6
- babel-generator 6.26.0
- babel-preset-env 1.6.0
- prop-types-exact 1.1.1
- react-hot-loader 3.1.1
- babel-preset-react 6.24.1
- source-map-support 0.4.18
- webpack-dev-middleware 1.12.0
- webpack-hot-middleware 2.19.1
- hoist-non-react-statics 2.3.1
- write-file-webpack-plugin 4.2.0
- babel-plugin-react-require 3.0.0
- babel-plugin-module-resolver 2.7.1
- babel-plugin-transform-runtime 6.23.0
- friendly-errors-webpack-plugin 1.6.1
- babel-plugin-syntax-dynamic-import 6.18.0
- case-sensitive-paths-webpack-plugin 2.1.1
- babel-plugin-transform-class-properties 6.24.1
- babel-plugin-transform-react-jsx-source 6.22.0
- babel-plugin-transform-object-rest-spread 6.26.0
- babel-plugin-transform-es2015-modules-commonjs 6.26.0
- babel-plugin-transform-react-remove-prop-types 0.4.8
Peer requirements
Optional dependencies
- None declared
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 9/10 — Found 27/29 approved changesets -- score normalized to 9 |
|---|---|
| Maintained | 10/10 — 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| License | 10/10 — license file detected |
| Token-Permissions | 0/10 — detected GitHub workflow tokens with excessive permissions |
| Security-Policy | 10/10 — security policy file detected |
| Packaging | 10/10 — packaging workflow detected |
| Binary-Artifacts | 0/10 — binaries present in source code |
| Pinned-Dependencies | 4/10 — dependency not pinned by hash detected -- score normalized to 4 |
| Fuzzing | 10/10 — project is fuzzed |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
Compare Next.js
Evidence and freshness
- https://registry.npmjs.org/next/4.2.1 — retrieved 2026-10-29T12:56:31.343Z
- https://api.deps.dev/v3/projects/github.com%2Fvercel%2Fnext.js — retrieved 2026-10-29T11:10:26.010Z