serve 1.3.0

Simple command-line file / directory server built with connect

serve@1.3.0 was published on 2013-07-04. Its manifest declares 5 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

All serve versions · Permanent reference to 1.3.0 · Latest release

Package specifications

Version	1.3.0
License declaration	Not declared
Published	2013-07-04T16:42:40.813Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	5
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	9
Resolved graph dependencies	167
Repository stars	9906
Repository forks	706

Install serve 1.3.0

npm install serve@1.3.0
pnpm add serve@1.3.0
yarn add serve@1.3.0

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

commander@0.6.1 — direct
connect@2.3.9 — direct
jade@1.11.0 — direct
less-middleware@3.1.0 — direct
stylus@0.64.0 — direct
bytes@0.1.0 — indirect
cookie@0.0.4 — indirect
crc@0.2.0 — indirect
debug@4.4.3 — indirect
formidable@1.0.11 — indirect
fresh@0.1.0 — indirect
qs@0.4.2 — indirect
send@0.0.3 — indirect
character-parser@1.2.1 — indirect
clean-css@3.4.28 — indirect
commander@2.6.0 — indirect
constantinople@3.0.2 — indirect
jstransformer@0.0.2 — indirect
mkdirp@0.5.6 — indirect
transformers@2.1.0 — indirect
uglify-js@2.8.29 — indirect
void-elements@2.0.1 — indirect
with@4.0.3 — indirect
less@3.9.0 — indirect
node.extend@2.0.3 — indirect
@adobe/css-tools@4.3.3 — indirect
glob@10.5.0 — indirect
sax@1.4.4 — indirect
source-map@0.7.6 — indirect
ms@2.1.3 — indirect
mime@1.2.6 — indirect
range-parser@0.0.4 — indirect
commander@2.8.1 — indirect
source-map@0.4.4 — indirect
acorn@2.7.0 — indirect
is-promise@2.2.2 — indirect
promise@6.1.0 — indirect
minimist@1.2.8 — indirect
css@1.0.8 — indirect
promise@2.0.0 — indirect
uglify-js@2.2.5 — indirect
source-map@0.5.7 — indirect
uglify-to-browserify@1.0.2 — indirect
yargs@3.10.0 — indirect
acorn@1.2.2 — indirect
acorn-globals@1.0.9 — indirect
clone@2.1.2 — indirect
errno@0.1.8 — indirect
graceful-fs@4.2.11 — indirect
image-size@0.5.5 — indirect
mime@1.6.0 — indirect
promise@7.3.1 — indirect
request@2.88.2 — indirect
source-map@0.6.1 — indirect
hasown@2.0.4 — indirect
is@3.3.2 — indirect
foreground-child@3.3.1 — indirect
jackspeak@3.4.3 — indirect
minimatch@9.0.9 — indirect
minipass@7.1.3 — indirect
package-json-from-dist@1.0.1 — indirect
path-scurry@1.11.1 — indirect
graceful-readlink@1.0.1 — indirect
amdefine@1.0.1 — indirect
asap@1.0.0 — indirect
css-parse@1.0.4 — indirect
css-stringify@1.0.5 — indirect
is-promise@1.0.1 — indirect
optimist@0.3.7 — indirect
source-map@0.1.43 — indirect
camelcase@1.2.1 — indirect
cliui@2.1.0 — indirect
decamelize@1.2.0 — indirect
window-size@0.1.0 — indirect
prr@1.0.1 — indirect
asap@2.0.6 — indirect
aws-sign2@0.7.0 — indirect
aws4@1.13.2 — indirect
caseless@0.12.0 — indirect
combined-stream@1.0.8 — indirect
extend@3.0.2 — indirect
forever-agent@0.6.1 — indirect
form-data@2.3.3 — indirect
har-validator@5.1.5 — indirect
http-signature@1.2.0 — indirect
is-typedarray@1.0.0 — indirect
isstream@0.1.2 — indirect
json-stringify-safe@5.0.1 — indirect
mime-types@2.1.35 — indirect
oauth-sign@0.9.0 — indirect
performance-now@2.1.0 — indirect
qs@6.5.5 — indirect
safe-buffer@5.2.1 — indirect
tough-cookie@2.5.0 — indirect
tunnel-agent@0.6.0 — indirect
uuid@3.4.0 — indirect
function-bind@1.1.2 — indirect
cross-spawn@7.0.6 — indirect
signal-exit@4.1.0 — indirect
@isaacs/cliui@8.0.2 — indirect
@pkgjs/parseargs@0.11.0 — indirect
brace-expansion@2.1.7 — indirect
lru-cache@10.4.3 — indirect
wordwrap@0.0.3 — indirect
center-align@0.1.3 — indirect
right-align@0.1.3 — indirect
wordwrap@0.0.2 — indirect
delayed-stream@1.0.0 — indirect
asynckit@0.4.0 — indirect
ajv@6.15.0 — indirect
har-schema@2.0.0 — indirect
assert-plus@1.0.0 — indirect
jsprim@1.4.2 — indirect
sshpk@1.18.0 — indirect
mime-db@1.52.0 — indirect
psl@1.15.0 — indirect
punycode@2.3.1 — indirect
path-key@3.1.1 — indirect
shebang-command@2.0.0 — indirect
which@2.0.2 — indirect
string-width@4.2.3 — indirect
string-width@5.1.2 — indirect
strip-ansi@6.0.1 — indirect
strip-ansi@7.2.0 — indirect
wrap-ansi@7.0.0 — indirect
wrap-ansi@8.1.0 — indirect
balanced-match@1.0.2 — indirect
align-text@0.1.4 — indirect
lazy-cache@1.0.4 — indirect
fast-deep-equal@3.1.3 — indirect
fast-json-stable-stringify@2.1.0 — indirect
json-schema-traverse@0.4.1 — indirect
uri-js@4.4.1 — indirect
extsprintf@1.3.0 — indirect
json-schema@0.4.0 — indirect
verror@1.10.0 — indirect
asn1@0.2.6 — indirect
bcrypt-pbkdf@1.0.2 — indirect
dashdash@1.14.1 — indirect
ecc-jsbn@0.1.2 — indirect
getpass@0.1.7 — indirect
jsbn@0.1.1 — indirect
safer-buffer@2.1.2 — indirect
tweetnacl@0.14.5 — indirect
shebang-regex@3.0.0 — indirect
isexe@2.0.0 — indirect
emoji-regex@8.0.0 — indirect
is-fullwidth-code-point@3.0.0 — indirect
strip-ansi@6.0.1 — indirect
eastasianwidth@0.2.0 — indirect
emoji-regex@9.2.2 — indirect
ansi-regex@5.0.1 — indirect
ansi-regex@6.4.0 — indirect
ansi-styles@4.3.0 — indirect
string-width@4.2.3 — indirect
strip-ansi@6.0.1 — indirect
ansi-styles@6.2.3 — indirect
kind-of@3.2.2 — indirect
longest@1.0.1 — indirect
repeat-string@1.6.1 — indirect
core-util-is@1.0.2 — indirect
ansi-regex@5.0.1 — indirect
color-convert@2.0.1 — indirect
emoji-regex@8.0.0 — indirect
ansi-regex@5.0.1 — indirect
is-buffer@1.1.6 — indirect
color-name@1.1.4 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	1/10 — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Code-Review	5/10 — Found 14/28 approved changesets -- score normalized to 5
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/serve/1.3.0 — retrieved 2026-10-31T21:48:37.253Z
https://api.deps.dev/v3/projects/github.com%2Fvercel%2Fserve — retrieved 2026-10-31T20:09:30.800Z
https://api.deps.dev/v3/systems/npm/packages/serve/versions/1.3.0 — retrieved 2026-10-31T21:48:37.632Z
https://api.deps.dev/v3/systems/npm/packages/serve/versions/1.3.0:dependencies — retrieved 2026-10-31T21:48:37.727Z