serve 14.1.0

Static file serving and directory listing

serve@14.1.0 was published on 2022-11-08. Its manifest declares 12 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >= 14.

All serve versions · Permanent reference to 14.1.0 · View npm registry JSON · Latest release

Package specifications

Version	14.1.0
License declaration	MIT
Published	2022-11-08T08:20:53.658Z
Node.js requirement	>= 14
Type declarations	Not declared
Runtime dependency count	12
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	24.19 KiB
Published file count	4
Package type	module
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	133
Repository stars	9909
Repository forks	706

Install serve 14.1.0

npm install serve@14.1.0
pnpm add serve@14.1.0
yarn add serve@14.1.0

Runtime dependencies

c8 7.11.3
ajv 8.11.0
arg 5.0.2
boxen 7.0.0
chalk 5.0.1
clipboardy 3.0.0
compression 1.7.4
update-check 1.5.4
@zeit/schemas 2.21.0
serve-handler 6.1.5
chalk-template 0.4.0
is-port-reachable 4.0.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@zeit/schemas@2.21.0 — direct
ajv@8.11.0 — direct
arg@5.0.2 — direct
boxen@7.0.0 — direct
c8@7.11.3 — direct
chalk@5.0.1 — direct
chalk-template@0.4.0 — direct
clipboardy@3.0.0 — direct
compression@1.7.4 — direct
is-port-reachable@4.0.0 — direct
serve-handler@6.1.5 — direct
update-check@1.5.4 — direct
fast-deep-equal@3.1.3 — indirect
json-schema-traverse@1.0.0 — indirect
require-from-string@2.0.2 — indirect
uri-js@4.4.1 — indirect
ansi-align@3.0.1 — indirect
camelcase@7.0.1 — indirect
cli-boxes@3.0.0 — indirect
string-width@5.1.2 — indirect
type-fest@2.19.0 — indirect
widest-line@4.0.1 — indirect
wrap-ansi@8.1.0 — indirect
@bcoe/v8-coverage@0.2.3 — indirect
@istanbuljs/schema@0.1.6 — indirect
find-up@5.0.0 — indirect
foreground-child@2.0.0 — indirect
istanbul-lib-coverage@3.2.2 — indirect
istanbul-lib-report@3.0.1 — indirect
istanbul-reports@3.2.0 — indirect
rimraf@3.0.2 — indirect
test-exclude@6.0.0 — indirect
v8-to-istanbul@9.3.0 — indirect
yargs@16.2.2 — indirect
yargs-parser@20.2.9 — indirect
chalk@4.1.2 — indirect
arch@2.2.0 — indirect
execa@5.1.1 — indirect
is-wsl@2.2.0 — indirect
accepts@1.3.8 — indirect
bytes@3.0.0 — indirect
compressible@2.0.18 — indirect
debug@2.6.9 — indirect
on-headers@1.0.2 — indirect
safe-buffer@5.1.2 — indirect
vary@1.1.2 — indirect
content-disposition@0.5.2 — indirect
fast-url-parser@1.1.3 — indirect
mime-types@2.1.18 — indirect
minimatch@3.1.2 — indirect
path-is-inside@1.0.2 — indirect
path-to-regexp@2.2.1 — indirect
range-parser@1.2.0 — indirect
registry-auth-token@3.3.2 — indirect
registry-url@3.1.0 — indirect
punycode@2.3.1 — indirect
string-width@4.2.3 — indirect
eastasianwidth@0.2.0 — indirect
emoji-regex@9.2.2 — indirect
strip-ansi@7.2.0 — indirect
ansi-styles@6.2.3 — indirect
strip-ansi@7.2.0 — indirect
locate-path@6.0.0 — indirect
path-exists@4.0.0 — indirect
cross-spawn@7.0.6 — indirect
signal-exit@3.0.7 — indirect
make-dir@4.0.0 — indirect
supports-color@7.2.0 — indirect
html-escaper@2.0.2 — indirect
glob@7.2.3 — indirect
minimatch@3.1.5 — indirect
@jridgewell/trace-mapping@0.3.31 — indirect
@types/istanbul-lib-coverage@2.0.6 — indirect
convert-source-map@2.0.0 — indirect
cliui@7.0.4 — indirect
escalade@3.2.0 — indirect
get-caller-file@2.0.5 — indirect
require-directory@2.1.1 — indirect
string-width@4.2.3 — indirect
y18n@5.0.8 — indirect
ansi-styles@4.3.0 — indirect
get-stream@6.0.1 — indirect
human-signals@2.1.0 — indirect
is-stream@2.0.1 — indirect
merge-stream@2.0.0 — indirect
npm-run-path@4.0.1 — indirect
onetime@5.1.2 — indirect
strip-final-newline@2.0.0 — indirect
is-docker@2.2.1 — indirect
mime-types@2.1.35 — indirect
negotiator@0.6.3 — indirect
mime-db@1.52.0 — indirect
ms@2.0.0 — indirect
punycode@1.4.1 — indirect
mime-db@1.33.0 — indirect
brace-expansion@1.1.21 — indirect
rc@1.2.8 — indirect
emoji-regex@8.0.0 — indirect
is-fullwidth-code-point@3.0.0 — indirect
strip-ansi@6.0.1 — indirect
ansi-regex@6.5.0 — indirect
ansi-regex@6.5.0 — indirect
p-locate@5.0.0 — indirect
path-key@3.1.1 — indirect
shebang-command@2.0.0 — indirect
which@2.0.2 — indirect
semver@7.8.6 — indirect
has-flag@4.0.0 — indirect
fs.realpath@1.0.0 — indirect
inflight@1.0.6 — indirect
inherits@2.0.4 — indirect
once@1.4.0 — indirect
path-is-absolute@1.0.1 — indirect
@jridgewell/resolve-uri@3.1.2 — indirect
@jridgewell/sourcemap-codec@1.6.0 — indirect
string-width@4.2.3 — indirect
wrap-ansi@7.0.0 — indirect
color-convert@2.0.1 — indirect
mimic-fn@2.1.0 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
deep-extend@0.6.0 — indirect
ini@1.3.8 — indirect
minimist@1.2.8 — indirect
strip-json-comments@2.0.1 — indirect
ansi-regex@5.0.1 — indirect
p-limit@3.1.0 — indirect
shebang-regex@3.0.0 — indirect
isexe@2.0.0 — indirect
wrappy@1.0.2 — indirect
ansi-styles@4.3.0 — indirect
color-name@1.1.4 — indirect
yocto-queue@0.1.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	1/10 — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Code-Review	5/10 — Found 14/28 approved changesets -- score normalized to 5
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-04T04:19:42.740Z
https://api.deps.dev/v3/systems/npm/packages/serve/versions/14.1.0:dependencies — retrieved 2026-11-04T04:19:42.856Z
https://api.deps.dev/v3/systems/npm/packages/serve/versions/14.1.0 — retrieved 2026-11-04T04:19:42.867Z
https://api.deps.dev/v3/projects/github.com%2Fvercel%2Fserve — retrieved 2026-11-03T19:22:01.514Z (stale snapshot; refresh pending)