react-dev-utils 9.0.1

Webpack utilities used by Create React App

react-dev-utils@9.0.1 was published on 2019-05-08. Its manifest declares 25 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=8.10.

All react-dev-utils versions · Permanent reference to 9.0.1 · Latest release

Package specifications

Version	9.0.1
License declaration	MIT
Published	2019-05-08T17:31:26.152Z
Node.js requirement	>=8.10
Type declarations	Not declared
Runtime dependency count	25
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	105.90 KiB
Published file count	36
Package type	Not declared
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	265
Repository stars	103236
Repository forks	26875

Install react-dev-utils 9.0.1

npm install react-dev-utils@9.0.1
pnpm add react-dev-utils@9.0.1
yarn add react-dev-utils@9.0.1

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@babel/code-frame@7.0.0 — direct
address@1.0.3 — direct
browserslist@4.5.4 — direct
chalk@2.4.2 — direct
cross-spawn@6.0.5 — direct
detect-port-alt@1.1.6 — direct
escape-string-regexp@1.0.5 — direct
filesize@3.6.1 — direct
find-up@3.0.0 — direct
fork-ts-checker-webpack-plugin@1.1.1 — direct
global-modules@2.0.0 — direct
globby@8.0.2 — direct
gzip-size@5.0.0 — direct
immer@1.10.0 — direct
inquirer@6.2.2 — direct
is-root@2.0.0 — direct
loader-utils@1.2.3 — direct
opn@5.4.0 — direct
pkg-up@2.0.0 — direct
react-error-overlay@5.1.6 — direct
recursive-readdir@2.2.2 — direct
shell-quote@1.6.1 — direct
sockjs-client@1.3.0 — direct
strip-ansi@5.2.0 — direct
text-table@0.2.0 — direct
@babel/highlight@7.25.9 — indirect
caniuse-lite@1.0.30001819 — indirect
electron-to-chromium@1.5.467 — indirect
node-releases@1.1.77 — indirect
ansi-styles@3.2.1 — indirect
supports-color@5.5.0 — indirect
nice-try@1.0.5 — indirect
path-key@2.0.1 — indirect
semver@5.7.2 — indirect
shebang-command@1.2.0 — indirect
which@1.3.1 — indirect
debug@2.6.9 — indirect
locate-path@3.0.0 — indirect
babel-code-frame@6.26.0 — indirect
chokidar@2.1.8 — indirect
micromatch@3.1.10 — indirect
minimatch@3.1.5 — indirect
tapable@1.1.3 — indirect
worker-rpc@0.1.1 — indirect
global-prefix@3.0.0 — indirect
array-union@1.0.2 — indirect
dir-glob@2.0.0 — indirect
fast-glob@2.2.7 — indirect
glob@7.2.3 — indirect
ignore@3.3.10 — indirect
pify@3.0.0 — indirect
slash@1.0.0 — indirect
duplexer@0.1.2 — indirect
ansi-escapes@3.2.0 — indirect
cli-cursor@2.1.0 — indirect
cli-width@2.2.1 — indirect
external-editor@3.1.0 — indirect
figures@2.0.0 — indirect
lodash@4.18.1 — indirect
mute-stream@0.0.7 — indirect
run-async@2.4.1 — indirect
rxjs@6.6.7 — indirect
string-width@2.1.1 — indirect
through@2.3.8 — indirect
big.js@5.2.2 — indirect
emojis-list@2.1.0 — indirect
json5@1.0.2 — indirect
is-wsl@1.1.0 — indirect
find-up@2.1.0 — indirect
minimatch@3.0.4 — indirect
array-filter@0.0.1 — indirect
array-map@0.0.1 — indirect
array-reduce@0.0.0 — indirect
jsonify@0.0.1 — indirect
debug@3.2.7 — indirect
eventsource@1.1.2 — indirect
faye-websocket@0.11.4 — indirect
inherits@2.0.4 — indirect
json3@3.3.3 — indirect
url-parse@1.5.10 — indirect
ansi-regex@4.1.1 — indirect
@babel/helper-validator-identifier@7.29.7 — indirect
js-tokens@4.0.0 — indirect
picocolors@1.1.1 — indirect
color-convert@1.9.3 — indirect
has-flag@3.0.0 — indirect
shebang-regex@1.0.0 — indirect
isexe@2.0.0 — indirect
ms@2.0.0 — indirect
p-locate@3.0.0 — indirect
path-exists@3.0.0 — indirect
chalk@1.1.3 — indirect
esutils@2.0.3 — indirect
js-tokens@3.0.2 — indirect
anymatch@2.0.0 — indirect
async-each@1.0.6 — indirect
braces@2.3.2 — indirect
fsevents@1.2.13 — indirect
glob-parent@3.1.0 — indirect
is-binary-path@1.0.1 — indirect
is-glob@4.0.3 — indirect
normalize-path@3.0.0 — indirect
path-is-absolute@1.0.1 — indirect
readdirp@2.2.1 — indirect
upath@1.2.0 — indirect
arr-diff@4.0.0 — indirect
array-unique@0.3.2 — indirect
define-property@2.0.2 — indirect
extend-shallow@3.0.2 — indirect
extglob@2.0.4 — indirect
fragment-cache@0.2.1 — indirect
kind-of@6.0.3 — indirect
nanomatch@1.2.13 — indirect
object.pick@1.3.0 — indirect
regex-not@1.0.2 — indirect
snapdragon@0.8.2 — indirect
to-regex@3.0.2 — indirect
brace-expansion@1.1.21 — indirect
microevent.ts@0.1.1 — indirect
ini@1.3.8 — indirect
array-uniq@1.0.3 — indirect
arrify@1.0.1 — indirect
path-type@3.0.0 — indirect
@mrmlnc/readdir-enhanced@2.2.1 — indirect
@nodelib/fs.stat@1.1.3 — indirect
merge2@1.4.1 — indirect
fs.realpath@1.0.0 — indirect
inflight@1.0.6 — indirect
once@1.4.0 — indirect
restore-cursor@2.0.0 — indirect
chardet@0.7.0 — indirect
iconv-lite@0.4.24 — indirect
tmp@0.0.33 — indirect
tslib@1.14.1 — indirect
is-fullwidth-code-point@2.0.0 — indirect
strip-ansi@4.0.0 — indirect
minimist@1.2.8 — indirect
locate-path@2.0.0 — indirect
ms@2.1.3 — indirect
websocket-driver@0.7.5 — indirect
querystringify@2.2.0 — indirect
requires-port@1.0.0 — indirect
color-name@1.1.3 — indirect
p-limit@2.3.0 — indirect
ansi-styles@2.2.1 — indirect
has-ansi@2.0.0 — indirect
strip-ansi@3.0.1 — indirect
supports-color@2.0.0 — indirect
normalize-path@2.1.1 — indirect
arr-flatten@1.1.0 — indirect
extend-shallow@2.0.1 — indirect
fill-range@4.0.0 — indirect
isobject@3.0.1 — indirect
repeat-element@1.1.4 — indirect
snapdragon-node@2.1.1 — indirect
split-string@3.1.0 — indirect
bindings@1.5.0 — indirect
nan@2.30.0 — indirect
is-glob@3.1.0 — indirect
path-dirname@1.0.2 — indirect
binary-extensions@1.13.1 — indirect
is-extglob@2.1.1 — indirect
graceful-fs@4.2.11 — indirect
readable-stream@2.3.8 — indirect
is-descriptor@1.0.4 — indirect
assign-symbols@1.0.0 — indirect
is-extendable@1.0.1 — indirect
define-property@1.0.0 — indirect
expand-brackets@2.1.4 — indirect
extend-shallow@2.0.1 — indirect
map-cache@0.2.2 — indirect
is-windows@1.0.2 — indirect
safe-regex@1.1.0 — indirect
base@0.11.2 — indirect
define-property@0.2.5 — indirect
extend-shallow@2.0.1 — indirect
source-map@0.5.7 — indirect
source-map-resolve@0.5.3 — indirect
use@3.1.1 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
call-me-maybe@1.0.2 — indirect
glob-to-regexp@0.3.0 — indirect
wrappy@1.0.2 — indirect
onetime@2.0.1 — indirect
signal-exit@3.0.7 — indirect
safer-buffer@2.1.2 — indirect
os-tmpdir@1.0.2 — indirect
ansi-regex@3.0.1 — indirect
p-locate@2.0.0 — indirect
http-parser-js@0.5.10 — indirect
safe-buffer@5.1.2 — indirect
websocket-extensions@0.1.4 — indirect
p-try@2.2.0 — indirect
ansi-regex@2.1.1 — indirect
remove-trailing-separator@1.1.0 — indirect
is-extendable@0.1.1 — indirect
extend-shallow@2.0.1 — indirect
is-number@3.0.0 — indirect
repeat-string@1.6.1 — indirect
to-regex-range@2.1.1 — indirect
define-property@1.0.0 — indirect
snapdragon-util@3.0.1 — indirect
file-uri-to-path@1.0.0 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
is-accessor-descriptor@1.0.2 — indirect
is-data-descriptor@1.0.1 — indirect
is-plain-object@2.0.4 — indirect
is-descriptor@1.0.4 — indirect
define-property@0.2.5 — indirect
extend-shallow@2.0.1 — indirect
posix-character-classes@0.1.1 — indirect
ret@0.1.15 — indirect
cache-base@1.0.1 — indirect
class-utils@0.3.6 — indirect
component-emitter@1.3.1 — indirect
define-property@1.0.0 — indirect
mixin-deep@1.3.2 — indirect
pascalcase@0.1.1 — indirect
is-descriptor@0.1.8 — indirect
atob@2.1.2 — indirect
decode-uri-component@0.2.2 — indirect
resolve-url@0.2.1 — indirect
source-map-url@0.4.1 — indirect
urix@0.1.0 — indirect
mimic-fn@1.2.0 — indirect
p-limit@1.3.0 — indirect
kind-of@3.2.2 — indirect
is-descriptor@1.0.4 — indirect
kind-of@3.2.2 — indirect
hasown@2.0.4 — indirect
collection-visit@1.0.0 — indirect
get-value@2.0.6 — indirect
has-value@1.0.0 — indirect
set-value@2.0.1 — indirect
to-object-path@0.3.0 — indirect
union-value@1.0.1 — indirect
unset-value@1.0.0 — indirect
arr-union@3.1.0 — indirect
define-property@0.2.5 — indirect
static-extend@0.1.2 — indirect
is-descriptor@1.0.4 — indirect
for-in@1.0.2 — indirect
is-extendable@1.0.1 — indirect
p-try@1.0.0 — indirect
is-buffer@1.1.6 — indirect
function-bind@1.1.2 — indirect
map-visit@1.0.0 — indirect
object-visit@1.0.1 — indirect
has-values@1.0.0 — indirect
extend-shallow@2.0.1 — indirect
kind-of@3.2.2 — indirect
has-value@0.3.1 — indirect
define-property@0.2.5 — indirect
object-copy@0.1.0 — indirect
kind-of@4.0.0 — indirect
has-values@0.1.4 — indirect
isobject@2.1.0 — indirect
copy-descriptor@0.1.1 — indirect
define-property@0.2.5 — indirect
kind-of@3.2.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-5q6m-3h65-w53x

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review	7/10 — Found 11/15 approved changesets -- score normalized to 7
Security-Policy	10/10 — security policy file detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
License	10/10 — license file detected
Pinned-Dependencies	2/10 — dependency not pinned by hash detected -- score normalized to 2
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/react-dev-utils/9.0.1 — retrieved 2026-10-29T12:30:09.395Z
https://api.deps.dev/v3/projects/github.com%2Ffacebook%2Fcreate-react-app — retrieved 2026-10-29T08:19:25.229Z
https://api.deps.dev/v3/systems/npm/packages/react-dev-utils/versions/9.0.1 — retrieved 2026-10-29T12:30:09.918Z
https://api.deps.dev/v3/systems/npm/packages/react-dev-utils/versions/9.0.1:dependencies — retrieved 2026-10-29T12:30:09.959Z