react-dev-utils 2.0.1

Webpack utilities used by Create React App

react-dev-utils@2.0.1 was published on 2017-05-24. Its manifest declares 17 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=6.

All react-dev-utils versions · Permanent reference to 2.0.1 · Latest release

Package specifications

Version	2.0.1
License declaration	BSD-3-Clause
Published	2017-05-24T12:22:29.822Z
Node.js requirement	>=6
Type declarations	Not declared
Runtime dependency count	17
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	3
Resolved graph dependencies	75
Repository stars	103236
Repository forks	26875

Install react-dev-utils 2.0.1

npm install react-dev-utils@2.0.1
pnpm add react-dev-utils@2.0.1
yarn add react-dev-utils@2.0.1

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@timer/detect-port@1.1.3 — direct
address@1.0.1 — direct
anser@1.3.0 — direct
ansi-escapes@1.4.0 — indirect
ansi-regex@2.1.1 — indirect
ansi-regex@3.0.1 — indirect
ansi-styles@2.2.1 — indirect
array-filter@0.0.1 — indirect
array-map@0.0.1 — indirect
array-reduce@0.0.0 — indirect
babel-code-frame@6.22.0 — direct
balanced-match@1.0.2 — indirect
brace-expansion@1.1.21 — indirect
chalk@1.1.3 — direct
chardet@0.4.2 — indirect
cli-cursor@2.1.0 — indirect
cli-width@2.2.1 — indirect
concat-map@0.0.1 — indirect
cross-spawn@4.0.2 — direct
debug@2.6.9 — indirect
duplexer@0.1.2 — indirect
escape-string-regexp@1.0.5 — direct
esutils@2.0.3 — indirect
eventsource@0.1.6 — indirect
external-editor@2.2.0 — indirect
faye-websocket@0.11.4 — indirect
figures@2.0.0 — indirect
filesize@3.3.0 — direct
gzip-size@3.0.0 — direct
has-ansi@2.0.0 — indirect
html-entities@1.2.1 — direct
http-parser-js@0.5.10 — indirect
iconv-lite@0.4.24 — indirect
inherits@2.0.4 — indirect
inquirer@3.0.6 — direct
is-fullwidth-code-point@2.0.0 — indirect
is-wsl@1.1.0 — indirect
isexe@2.0.0 — indirect
js-tokens@3.0.2 — indirect
json3@3.3.3 — indirect
jsonify@0.0.1 — indirect
lodash@4.18.1 — indirect
lru-cache@4.1.5 — indirect
mimic-fn@1.2.0 — indirect
minimatch@3.0.3 — indirect
ms@2.0.0 — indirect
mute-stream@0.0.7 — indirect
onetime@2.0.1 — indirect
opn@5.0.0 — direct
original@1.0.2 — indirect
os-tmpdir@1.0.2 — indirect
pseudomap@1.0.2 — indirect
querystringify@2.2.0 — indirect
recursive-readdir@2.2.1 — direct
requires-port@1.0.0 — indirect
restore-cursor@2.0.0 — indirect
run-async@2.4.1 — indirect
rx@4.1.0 — indirect
safe-buffer@5.2.1 — indirect
safer-buffer@2.1.2 — indirect
shell-quote@1.6.1 — direct
signal-exit@3.0.7 — indirect
sockjs-client@1.1.4 — direct
string-width@2.1.1 — indirect
strip-ansi@3.0.1 — direct
strip-ansi@4.0.0 — indirect
supports-color@2.0.0 — indirect
text-table@0.2.0 — direct
through@2.3.8 — indirect
tmp@0.0.33 — indirect
url-parse@1.5.10 — indirect
websocket-driver@0.7.5 — indirect
websocket-extensions@0.1.4 — indirect
which@1.3.1 — indirect
yallist@2.1.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review	7/10 — Found 11/15 approved changesets -- score normalized to 7
Security-Policy	10/10 — security policy file detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
License	10/10 — license file detected
Pinned-Dependencies	2/10 — dependency not pinned by hash detected -- score normalized to 2
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/react-dev-utils/2.0.1 — retrieved 2026-10-29T13:14:40.943Z
https://api.deps.dev/v3/projects/github.com%2Ffacebook%2Fcreate-react-app — retrieved 2026-10-29T08:19:25.229Z
https://api.deps.dev/v3/systems/npm/packages/react-dev-utils/versions/2.0.1 — retrieved 2026-10-29T13:14:41.455Z
https://api.deps.dev/v3/systems/npm/packages/react-dev-utils/versions/2.0.1:dependencies — retrieved 2026-10-29T13:14:41.481Z