thread-loader 3.0.3

Runs the following loaders in a worker pool

thread-loader@3.0.3 was published on 2021-04-13. Its manifest declares 5 runtime dependencies and 1 peer requirement. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >= 10.13.0.

All thread-loader versions · Permanent reference to 3.0.3 · Latest release

Package specifications

Version	3.0.3
License declaration	MIT
Published	2021-04-13T11:48:30.916Z
Node.js requirement	>= 10.13.0
Type declarations	Not declared
Runtime dependency count	5
Peer requirement count	1
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	42.25 KiB
Published file count	12
Package type	Not declared
ES module entry	Not declared
Default entry	dist/cjs.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	16
Repository stars	1130
Repository forks	69

Install thread-loader 3.0.3

npm install thread-loader@3.0.3
pnpm add thread-loader@3.0.3
yarn add thread-loader@3.0.3

Runtime dependencies

Peer requirements

webpack ^4.27.0 || ^5.0.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@types/json-schema@7.0.15 — indirect
ajv@6.15.0 — indirect
ajv-keywords@3.5.2 — indirect
big.js@5.2.2 — indirect
emojis-list@3.0.0 — indirect
fast-deep-equal@3.1.3 — indirect
fast-json-stable-stringify@2.1.0 — indirect
json-parse-better-errors@1.0.2 — direct
json-schema-traverse@0.4.1 — indirect
json5@2.2.3 — indirect
loader-runner@4.3.2 — direct
loader-utils@2.0.4 — direct
neo-async@2.6.2 — direct
punycode@2.3.1 — indirect
schema-utils@3.3.0 — direct
uri-js@4.4.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	3/10 — Found 7/20 approved changesets -- score normalized to 3
Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Pinned-Dependencies	4/10 — dependency not pinned by hash detected -- score normalized to 4
Token-Permissions	10/10 — GitHub workflow tokens follow principle of least privilege
Binary-Artifacts	10/10 — no binaries found in the repo
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/thread-loader/3.0.3 — retrieved 2026-10-29T13:41:29.747Z
https://api.deps.dev/v3/projects/github.com%2Fwebpack-contrib%2Fthread-loader — retrieved 2026-10-29T09:00:48.299Z
https://api.deps.dev/v3/systems/npm/packages/thread-loader/versions/3.0.3 — retrieved 2026-10-29T13:41:30.337Z
https://api.deps.dev/v3/systems/npm/packages/thread-loader/versions/3.0.3:dependencies — retrieved 2026-10-29T13:41:30.355Z