Node-RED 0.10.10
A visual tool for wiring the Internet of Things
node-red@0.10.10 was published on 2015-06-17. Its manifest declares 29 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.8 <0.12.
All Node-RED versions · Permanent reference to 0.10.10 · Latest release
Package specifications
| Version | 0.10.10 |
|---|---|
| License declaration | Apache-2.0 |
| Published | 2015-06-17T13:43:40.907Z |
| Node.js requirement | >=0.8 <0.12 |
| Type declarations | Not declared |
| Runtime dependency count | 29 |
| Peer requirement count | 0 |
| Optional dependency count | 2 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | Not supplied |
| Published file count | Not supplied |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | red/red.js |
| Side effects declaration | Not declared |
| Direct advisories | 2 |
| Resolved graph dependencies | 382 |
| Repository stars | 23787 |
| Repository forks | 3969 |
Install Node-RED 0.10.10
npm install node-red@0.10.10 pnpm add node-red@0.10.10 yarn add node-red@0.10.10
Runtime dependencies
- ws 0.7.2
- cors 2.7.1
- cron 1.0.9
- mqtt 0.3.x
- nopt 3.0.2
- when 3.7.3
- clone 1.0.2
- bcrypt 0.8.3
- xml2js 0.4.9
- cheerio 0.19.0
- express 3.17.2
- is-utf8 0.2.0
- bcryptjs 2.1.0
- fs-extra 0.18.4
- mustache 2.1.1
- passport 0.2.2
- raw-body 2.1.1
- fs.notify 0.0.4
- sentiment 0.2.3
- uglify-js 2.4.23
- on-headers 1.0.0
- oauth2orize 1.0.1
- follow-redirects 0.0.3
- node-red-node-email 0.0.*
- passport-http-bearer 1.0.1
- node-red-node-twitter 0.0.*
- node-red-node-feedparser 0.0.*
- node-red-node-serialport 0.0.*
- passport-oauth2-client-password 0.1.2
Peer requirements
- None declared
Optional dependencies
- bcrypt 0.8.3
- node-red-node-serialport 0.0.*
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- bcrypt@0.8.3 — direct
- bcryptjs@2.1.0 — direct
- cheerio@0.19.0 — direct
- clone@1.0.2 — direct
- cors@2.7.1 — direct
- cron@1.0.9 — direct
- express@3.17.2 — direct
- follow-redirects@0.0.3 — direct
- fs-extra@0.18.4 — direct
- fs.notify@0.0.4 — direct
- is-utf8@0.2.0 — direct
- mqtt@0.3.13 — direct
- mustache@2.1.1 — direct
- node-red-node-email@0.0.4 — direct
- node-red-node-feedparser@0.0.3 — direct
- node-red-node-serialport@0.0.5 — direct
- node-red-node-twitter@0.0.6 — direct
- nopt@3.0.2 — direct
- oauth2orize@1.0.1 — direct
- on-headers@1.0.0 — direct
- passport@0.2.2 — direct
- passport-http-bearer@1.0.1 — direct
- passport-oauth2-client-password@0.1.2 — direct
- raw-body@2.1.1 — direct
- sentiment@0.2.3 — direct
- uglify-js@2.4.23 — direct
- when@3.7.3 — direct
- ws@0.7.2 — direct
- xml2js@0.4.9 — direct
- bindings@1.2.1 — indirect
- nan@1.8.4 — indirect
- css-select@1.0.0 — indirect
- dom-serializer@0.1.1 — indirect
- entities@1.1.2 — indirect
- htmlparser2@3.8.3 — indirect
- lodash@3.10.1 — indirect
- vary@1.1.2 — indirect
- moment-timezone@0.3.1 — indirect
- basic-auth@1.0.0 — indirect
- commander@1.3.2 — indirect
- connect@2.26.1 — indirect
- cookie@0.1.2 — indirect
- cookie-signature@1.0.5 — indirect
- crc@3.0.0 — indirect
- debug@2.0.0 — indirect
- depd@0.4.5 — indirect
- escape-html@1.0.1 — indirect
- fresh@0.2.4 — indirect
- media-typer@0.3.0 — indirect
- merge-descriptors@0.0.2 — indirect
- methods@1.1.0 — indirect
- mkdirp@0.5.0 — indirect
- parseurl@1.3.3 — indirect
- proxy-addr@1.0.1 — indirect
- range-parser@1.0.3 — indirect
- send@0.9.2 — indirect
- vary@1.0.1 — indirect
- underscore@1.13.8 — indirect
- graceful-fs@3.0.12 — indirect
- jsonfile@2.4.0 — indirect
- rimraf@2.7.1 — indirect
- async@0.1.22 — indirect
- retry@0.6.1 — indirect
- readable-stream@1.0.34 — indirect
- imap@0.8.14 — indirect
- nodemailer@1.3.4 — indirect
- feedparser@0.19.2 — indirect
- request@2.57.0 — indirect
- serialport@1.7.3 — indirect
- oauth@0.9.13 — indirect
- twitter-ng@0.6.2 — indirect
- abbrev@1.1.1 — indirect
- debug@0.7.4 — indirect
- uid2@0.0.4 — indirect
- utils-merge@1.0.0 — indirect
- passport-strategy@1.0.0 — indirect
- pause@0.0.1 — indirect
- bytes@2.1.0 — indirect
- iconv-lite@0.4.10 — indirect
- unpipe@1.0.0 — indirect
- async@0.2.10 — indirect
- lodash@1.3.1 — indirect
- async@0.2.10 — indirect
- source-map@0.1.34 — indirect
- uglify-to-browserify@1.0.2 — indirect
- yargs@3.5.4 — indirect
- bufferutil@1.1.0 — indirect
- options@0.0.6 — indirect
- ultron@1.0.2 — indirect
- utf-8-validate@1.1.0 — indirect
- sax@0.6.1 — indirect
- xmlbuilder@15.1.1 — indirect
- boolbase@1.0.0 — indirect
- css-what@1.0.0 — indirect
- domutils@1.4.3 — indirect
- nth-check@1.0.2 — indirect
- domelementtype@1.3.1 — indirect
- domhandler@2.3.0 — indirect
- domutils@1.5.1 — indirect
- entities@1.0.0 — indirect
- readable-stream@1.1.14 — indirect
- moment@2.31.0 — indirect
- keypress@0.1.0 — indirect
- basic-auth-connect@1.0.0 — indirect
- body-parser@1.8.4 — indirect
- bytes@1.0.0 — indirect
- compression@1.1.2 — indirect
- connect-timeout@1.3.0 — indirect
- cookie-parser@1.3.5 — indirect
- csurf@1.6.6 — indirect
- errorhandler@1.2.4 — indirect
- express-session@1.8.2 — indirect
- finalhandler@0.2.0 — indirect
- method-override@2.2.0 — indirect
- morgan@1.3.2 — indirect
- multiparty@3.3.2 — indirect
- qs@2.2.3 — indirect
- response-time@2.0.1 — indirect
- serve-favicon@2.1.7 — indirect
- serve-index@1.2.1 — indirect
- serve-static@1.6.5 — indirect
- type-is@1.5.7 — indirect
- vhost@3.0.2 — indirect
- ms@0.6.2 — indirect
- minimist@0.0.8 — indirect
- ipaddr.js@0.1.2 — indirect
- destroy@1.0.3 — indirect
- etag@1.3.1 — indirect
- mime@1.2.11 — indirect
- on-finished@2.1.0 — indirect
- natives@1.1.6 — indirect
- graceful-fs@4.2.11 — indirect
- glob@7.2.3 — indirect
- core-util-is@1.0.3 — indirect
- inherits@2.0.4 — indirect
- isarray@0.0.1 — indirect
- string_decoder@0.10.31 — indirect
- utf7@1.0.0 — indirect
- buildmail@1.3.0 — indirect
- hyperquest@1.3.0 — indirect
- libmime@1.2.0 — indirect
- nodemailer-direct-transport@1.1.0 — indirect
- nodemailer-smtp-transport@1.1.0 — indirect
- addressparser@0.1.3 — indirect
- array-indexofobject@0.0.1 — indirect
- readable-stream@1.0.34 — indirect
- resanitize@0.3.0 — indirect
- aws-sign2@0.5.0 — indirect
- bl@0.9.5 — indirect
- caseless@0.10.0 — indirect
- combined-stream@1.0.8 — indirect
- forever-agent@0.6.1 — indirect
- form-data@0.2.0 — indirect
- har-validator@1.8.0 — indirect
- hawk@2.3.1 — indirect
- http-signature@0.11.0 — indirect
- isstream@0.1.2 — indirect
- json-stringify-safe@5.0.1 — indirect
- mime-types@2.0.14 — indirect
- node-uuid@1.4.8 — indirect
- oauth-sign@0.8.2 — indirect
- qs@3.1.0 — indirect
- stringstream@0.0.6 — indirect
- tough-cookie@6.0.2 — indirect
- tunnel-agent@0.4.3 — indirect
- async@0.9.0 — indirect
- debug@2.6.9 — indirect
- optimist@0.6.1 — indirect
- serialport>1.7.3>node-pre-gyp@0.6.7 — indirect
- sf@0.1.7 — indirect
- amdefine@1.0.1 — indirect
- camelcase@1.2.1 — indirect
- decamelize@1.2.0 — indirect
- window-size@0.1.0 — indirect
- wordwrap@0.0.2 — indirect
- iconv-lite@0.4.4 — indirect
- qs@2.2.4 — indirect
- raw-body@1.3.0 — indirect
- accepts@1.1.4 — indirect
- compressible@2.0.18 — indirect
- vary@1.0.1 — indirect
- cookie@0.1.3 — indirect
- cookie-signature@1.0.6 — indirect
- csrf@2.0.7 — indirect
- http-errors@1.2.8 — indirect
- uid-safe@1.0.1 — indirect
- vary@1.0.1 — indirect
- stream-counter@0.2.0 — indirect
- etag@1.5.1 — indirect
- batch@0.5.1 — indirect
- send@0.9.3 — indirect
- ee-first@1.0.5 — indirect
- fs.realpath@1.0.0 — indirect
- inflight@1.0.6 — indirect
- minimatch@3.1.5 — indirect
- once@1.4.0 — indirect
- path-is-absolute@1.0.1 — indirect
- addressparser@0.3.2 — indirect
- libbase64@0.1.0 — indirect
- libqp@1.1.0 — indirect
- duplexer2@0.0.2 — indirect
- through2@0.6.5 — indirect
- iconv-lite@0.4.24 — indirect
- smtp-connection@1.3.8 — indirect
- nodemailer-wellknown@0.1.10 — indirect
- validator@1.5.1 — indirect
- readable-stream@1.0.34 — indirect
- delayed-stream@1.0.0 — indirect
- async@0.9.2 — indirect
- combined-stream@0.0.7 — indirect
- bluebird@2.11.0 — indirect
- chalk@1.1.3 — indirect
- commander@2.20.3 — indirect
- is-my-json-valid@2.20.6 — indirect
- boom@2.10.1 — indirect
- cryptiles@2.0.5 — indirect
- hoek@2.16.3 — indirect
- sntp@1.0.9 — indirect
- asn1@0.1.11 — indirect
- assert-plus@0.1.5 — indirect
- ctype@0.5.3 — indirect
- mime-db@1.12.0 — indirect
- tldts@7.4.19 — indirect
- ms@2.0.0 — indirect
- wordwrap@0.0.3 — indirect
- serialport>1.7.3>node-pre-gyp>mkdirp@0.5.0 — indirect
- serialport>1.7.3>node-pre-gyp>nopt@3.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog@1.2.0 — indirect
- serialport>1.7.3>node-pre-gyp>rc@1.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>request@2.55.0 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf@2.3.3 — indirect
- serialport>1.7.3>node-pre-gyp>semver@4.3.3 — indirect
- serialport>1.7.3>node-pre-gyp>tar@2.1.0 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack@2.0.0 — indirect
- negotiator@0.4.9 — indirect
- mime-db@1.54.0 — indirect
- base64-url@1.2.1 — indirect
- rndm@1.1.1 — indirect
- scmp@1.0.0 — indirect
- uid-safe@1.1.0 — indirect
- statuses@1.5.0 — indirect
- mz@1.3.0 — indirect
- crc@3.2.1 — indirect
- etag@1.4.0 — indirect
- wrappy@1.0.2 — indirect
- brace-expansion@1.1.21 — indirect
- readable-stream@1.0.34 — indirect
- xtend@4.0.2 — indirect
- safer-buffer@2.1.2 — indirect
- delayed-stream@0.0.5 — indirect
- ansi-styles@2.2.1 — indirect
- escape-string-regexp@1.0.5 — indirect
- has-ansi@2.0.0 — indirect
- strip-ansi@3.0.1 — indirect
- supports-color@2.0.0 — indirect
- generate-function@2.3.1 — indirect
- generate-object-property@1.2.0 — indirect
- is-my-ip-valid@1.0.1 — indirect
- jsonpointer@5.0.1 — indirect
- tldts-core@7.4.19 — indirect
- serialport>1.7.3>node-pre-gyp>mkdirp>minimist@0.0.8 — indirect
- serialport>1.7.3>node-pre-gyp>nopt>abbrev@1.0.5 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>ansi@0.3.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>are-we-there-yet@1.0.4 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge@1.2.0 — indirect
- serialport>1.7.3>node-pre-gyp>rc>deep-extend@0.2.11 — indirect
- serialport>1.7.3>node-pre-gyp>rc>ini@1.3.3 — indirect
- serialport>1.7.3>node-pre-gyp>rc>minimist@0.0.10 — indirect
- serialport>1.7.3>node-pre-gyp>rc>strip-json-comments@0.1.3 — indirect
- serialport>1.7.3>node-pre-gyp>request>aws-sign2@0.5.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>bl@0.9.4 — indirect
- serialport>1.7.3>node-pre-gyp>request>caseless@0.9.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>combined-stream@0.0.7 — indirect
- serialport>1.7.3>node-pre-gyp>request>forever-agent@0.6.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>form-data@0.2.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator@1.7.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>hawk@2.3.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>http-signature@0.10.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>isstream@0.1.2 — indirect
- serialport>1.7.3>node-pre-gyp>request>json-stringify-safe@5.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>mime-types@2.0.10 — indirect
- serialport>1.7.3>node-pre-gyp>request>node-uuid@1.4.3 — indirect
- serialport>1.7.3>node-pre-gyp>request>oauth-sign@0.6.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>qs@2.4.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>stringstream@0.0.4 — indirect
- serialport>1.7.3>node-pre-gyp>request>tough-cookie@1.1.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>tunnel-agent@0.4.0 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob@4.5.3 — indirect
- serialport>1.7.3>node-pre-gyp>tar>block-stream@0.0.7 — indirect
- serialport>1.7.3>node-pre-gyp>tar>fstream@1.0.4 — indirect
- serialport>1.7.3>node-pre-gyp>tar>inherits@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>debug@0.7.4 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>fstream@0.1.31 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>fstream-ignore@0.0.7 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>graceful-fs@1.2.3 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>once@1.1.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>readable-stream@1.0.33 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>rimraf@2.2.8 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>tar@0.1.20 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>uid-number@0.0.3 — indirect
- native-or-bluebird@1.1.2 — indirect
- thenify@3.3.1 — indirect
- thenify-all@1.6.0 — indirect
- balanced-match@1.0.2 — indirect
- concat-map@0.0.1 — indirect
- ansi-regex@2.1.1 — indirect
- is-property@1.0.2 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>are-we-there-yet>delegates@0.1.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>are-we-there-yet>readable-stream@1.1.13 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>has-unicode@1.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.pad@3.1.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.padleft@3.1.1 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.padright@3.1.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>bl>readable-stream@1.0.33 — indirect
- serialport>1.7.3>node-pre-gyp>request>combined-stream>delayed-stream@0.0.5 — indirect
- serialport>1.7.3>node-pre-gyp>request>form-data>async@0.9.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>bluebird@2.9.25 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk@1.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>commander@2.8.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>is-my-json-valid@2.10.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>hawk>boom@2.7.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>hawk>cryptiles@2.0.4 — indirect
- serialport>1.7.3>node-pre-gyp>request>hawk>hoek@2.13.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>hawk>sntp@1.0.9 — indirect
- serialport>1.7.3>node-pre-gyp>request>http-signature>asn1@0.1.11 — indirect
- serialport>1.7.3>node-pre-gyp>request>http-signature>assert-plus@0.1.5 — indirect
- serialport>1.7.3>node-pre-gyp>request>http-signature>ctype@0.5.3 — indirect
- serialport>1.7.3>node-pre-gyp>request>mime-types>mime-db@1.8.0 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>inflight@1.0.4 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>inherits@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>minimatch@2.0.7 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>once@1.3.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar>fstream>graceful-fs@3.0.6 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>fstream>graceful-fs@3.0.6 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>fstream>inherits@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>fstream-ignore>inherits@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>fstream-ignore>minimatch@0.2.14 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>readable-stream>core-util-is@1.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>readable-stream>inherits@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>readable-stream>isarray@0.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>readable-stream>string_decoder@0.10.31 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>tar>block-stream@0.0.7 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>tar>inherits@2.0.1 — indirect
- any-promise@1.3.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>are-we-there-yet>readable-stream>core-util-is@1.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>are-we-there-yet>readable-stream>inherits@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>are-we-there-yet>readable-stream>isarray@0.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>are-we-there-yet>readable-stream>string_decoder@0.10.31 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.pad>lodash._basetostring@3.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.pad>lodash._createpadding@3.6.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.padleft>lodash._basetostring@3.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.padleft>lodash._createpadding@3.6.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.padright>lodash._basetostring@3.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.padright>lodash._createpadding@3.6.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>bl>readable-stream>core-util-is@1.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>bl>readable-stream>inherits@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>bl>readable-stream>isarray@0.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>bl>readable-stream>string_decoder@0.10.31 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk>ansi-styles@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk>escape-string-regexp@1.0.3 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk>has-ansi@1.0.3 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk>strip-ansi@2.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk>supports-color@1.3.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>commander>graceful-readlink@1.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>is-my-json-valid>generate-function@2.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>is-my-json-valid>generate-object-property@1.1.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>is-my-json-valid>jsonpointer@1.1.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>is-my-json-valid>xtend@4.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>inflight>wrappy@1.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>minimatch>brace-expansion@1.1.0 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>once>wrappy@1.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>fstream-ignore>minimatch>lru-cache@2.6.2 — indirect
- serialport>1.7.3>node-pre-gyp>tar-pack>fstream-ignore>minimatch>sigmund@1.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.pad>lodash._createpadding>lodash.repeat@3.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.padleft>lodash._createpadding>lodash.repeat@3.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>npmlog>gauge>lodash.padright>lodash._createpadding>lodash.repeat@3.0.0 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk>has-ansi>ansi-regex@1.1.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk>has-ansi>get-stdin@4.0.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>chalk>strip-ansi>ansi-regex@1.1.1 — indirect
- serialport>1.7.3>node-pre-gyp>request>har-validator>is-my-json-valid>generate-object-property>is-property@1.0.2 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>minimatch>brace-expansion>balanced-match@0.2.0 — indirect
- serialport>1.7.3>node-pre-gyp>rimraf>glob>minimatch>brace-expansion>concat-map@0.0.1 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Known direct advisories
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Maintained | 10/10 — 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 |
|---|---|
| Code-Review | 4/10 — Found 5/12 approved changesets -- score normalized to 4 |
| Security-Policy | 10/10 — security policy file detected |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| Token-Permissions | 10/10 — GitHub workflow tokens follow principle of least privilege |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| License | 10/10 — license file detected |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Pinned-Dependencies | 2/10 — dependency not pinned by hash detected -- score normalized to 2 |
| Signed-Releases | 0/10 — Project has not signed or included provenance with any releases. |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
| Fuzzing | 0/10 — project is not fuzzed |
Evidence and freshness
- https://registry.npmjs.org/node-red/0.10.10 — retrieved 2026-10-29T10:49:13.028Z
- https://api.deps.dev/v3/projects/github.com%2Fnode-red%2Fnode-red — retrieved 2026-10-29T05:10:21.183Z
- https://api.deps.dev/v3/systems/npm/packages/node-red/versions/0.10.10 — retrieved 2026-10-29T10:49:13.562Z
- https://api.deps.dev/v3/systems/npm/packages/node-red/versions/0.10.10:dependencies — retrieved 2026-10-29T10:49:13.615Z