web3-provider-engine
A JavaScript library for composing Ethereum provider objects using middleware modules
web3-provider-engine@17.0.1 was published on 2024-04-22. Its manifest declares 22 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is ^16.20 || ^18.16 || >=20.
All web3-provider-engine versions · Permanent reference to 17.0.1
Package specifications
| Version | 17.0.1 |
|---|---|
| License declaration | MIT |
| Published | 2024-04-22T08:38:57.215Z |
| Node.js requirement | ^16.20 || ^18.16 || >=20 |
| Type declarations | Not declared |
| Runtime dependency count | 22 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 4137.72 KiB |
| Published file count | 74 |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | index.js |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 226 |
| Repository stars | 602 |
| Repository forks | 320 |
Install web3-provider-engine 17.0.1
npm install web3-provider-engine@17.0.1 pnpm add web3-provider-engine@17.0.1 yarn add web3-provider-engine@17.0.1
Runtime dependencies
- ws ^7.5.9
- xhr ^2.6.0
- async ^2.6.4
- clone ^2.1.2
- xtend ^4.0.2
- backoff ^2.5.0
- semaphore ^1.1.0
- @ethereumjs/tx ^4.2.0
- @ethereumjs/vm ^6.5.0
- readable-stream ^3.6.2
- @cypress/request ^3.0.1
- @ethereumjs/util ^8.1.0
- @ethereumjs/block ^4.3.0
- eth-block-tracker ^8.1.0
- promise-to-callback ^1.0.0
- @metamask/rpc-errors ^6.2.1
- json-stable-stringify ^1.1.1
- @metamask/eth-sig-util ^7.0.1
- @ethereumjs/statemanager ^1.1.0
- @metamask/eth-json-rpc-infura ^9.1.0
- @metamask/eth-json-rpc-filters ^7.0.0
- @metamask/eth-json-rpc-middleware ^12.1.0
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- @cypress/request@3.0.10 — direct
- @ethereumjs/block@4.3.0 — direct
- @ethereumjs/statemanager@1.1.0 — direct
- @ethereumjs/tx@4.2.0 — direct
- @ethereumjs/util@8.1.0 — direct
- @ethereumjs/vm@6.5.0 — direct
- @metamask/eth-json-rpc-filters@7.0.1 — direct
- @metamask/eth-json-rpc-infura@9.1.0 — direct
- @metamask/eth-json-rpc-middleware@12.1.2 — direct
- @metamask/eth-sig-util@7.0.3 — direct
- @metamask/rpc-errors@6.4.0 — direct
- async@2.6.4 — direct
- backoff@2.5.0 — direct
- clone@2.1.2 — direct
- eth-block-tracker@8.1.0 — direct
- json-stable-stringify@1.3.0 — direct
- promise-to-callback@1.0.0 — direct
- readable-stream@3.6.2 — direct
- semaphore@1.1.0 — direct
- ws@7.5.13 — direct
- xhr@2.6.0 — direct
- xtend@4.0.2 — direct
- aws-sign2@0.7.0 — indirect
- aws4@1.13.2 — indirect
- caseless@0.12.0 — indirect
- combined-stream@1.0.8 — indirect
- extend@3.0.2 — indirect
- forever-agent@0.6.1 — indirect
- form-data@4.0.6 — indirect
- http-signature@1.4.0 — indirect
- is-typedarray@1.0.0 — indirect
- isstream@0.1.2 — indirect
- json-stringify-safe@5.0.1 — indirect
- mime-types@2.1.35 — indirect
- performance-now@2.1.0 — indirect
- qs@6.14.3 — indirect
- safe-buffer@5.2.1 — indirect
- tough-cookie@5.1.2 — indirect
- tunnel-agent@0.6.0 — indirect
- uuid@8.3.2 — indirect
- @ethereumjs/common@3.2.0 — indirect
- @ethereumjs/rlp@4.0.1 — indirect
- @ethereumjs/trie@5.1.0 — indirect
- ethereum-cryptography@2.2.1 — indirect
- debug@4.4.3 — indirect
- ethers@5.8.0 — indirect
- js-sdsl@4.4.2 — indirect
- micro-ftch@0.3.1 — indirect
- @ethereumjs/blockchain@6.3.0 — indirect
- @ethereumjs/evm@1.4.0 — indirect
- mcl-wasm@0.7.9 — indirect
- rustbn.js@0.2.0 — indirect
- @metamask/eth-query@4.0.0 — indirect
- @metamask/json-rpc-engine@8.0.2 — indirect
- @metamask/safe-event-emitter@3.1.3 — indirect
- async-mutex@0.5.0 — indirect
- pify@5.0.0 — indirect
- @metamask/eth-json-rpc-provider@2.3.2 — indirect
- @metamask/json-rpc-engine@7.3.3 — indirect
- @metamask/utils@8.5.0 — indirect
- node-fetch@2.7.0 — indirect
- @metamask/eth-block-tracker@9.0.3 — indirect
- @metamask/eth-json-rpc-provider@3.0.2 — indirect
- klona@2.0.6 — indirect
- safe-stable-stringify@2.5.0 — indirect
- @metamask/abi-utils@2.0.4 — indirect
- @metamask/utils@9.3.0 — indirect
- @scure/base@1.1.9 — indirect
- tweetnacl@1.0.3 — indirect
- @metamask/utils@9.3.0 — indirect
- fast-safe-stringify@2.1.1 — indirect
- lodash@4.18.1 — indirect
- precond@0.2.3 — indirect
- json-rpc-random-id@1.0.1 — indirect
- call-bind@1.0.9 — indirect
- call-bound@1.0.4 — indirect
- isarray@2.0.5 — indirect
- jsonify@0.0.1 — indirect
- object-keys@1.1.1 — indirect
- is-fn@1.0.0 — indirect
- set-immediate-shim@1.0.1 — indirect
- inherits@2.0.4 — indirect
- string_decoder@1.3.0 — indirect
- util-deprecate@1.0.2 — indirect
- global@4.4.0 — indirect
- is-function@1.0.2 — indirect
- parse-headers@2.0.6 — indirect
- delayed-stream@1.0.0 — indirect
- asynckit@0.4.0 — indirect
- es-set-tostringtag@2.1.0 — indirect
- hasown@2.0.4 — indirect
- assert-plus@1.0.0 — indirect
- jsprim@2.0.2 — indirect
- sshpk@1.18.0 — indirect
- mime-db@1.52.0 — indirect
- side-channel@1.1.1 — indirect
- tldts@6.1.86 — indirect
- crc-32@1.2.2 — indirect
- @types/readable-stream@2.3.15 — indirect
- @noble/curves@1.4.2 — indirect
- @noble/hashes@1.4.0 — indirect
- @scure/bip32@1.4.0 — indirect
- @scure/bip39@1.3.0 — indirect
- ms@2.1.3 — indirect
- @ethersproject/abi@5.8.0 — indirect
- @ethersproject/abstract-provider@5.8.0 — indirect
- @ethersproject/abstract-signer@5.8.0 — indirect
- @ethersproject/address@5.8.0 — indirect
- @ethersproject/base64@5.8.0 — indirect
- @ethersproject/basex@5.8.0 — indirect
- @ethersproject/bignumber@5.8.0 — indirect
- @ethersproject/bytes@5.8.0 — indirect
- @ethersproject/constants@5.8.0 — indirect
- @ethersproject/contracts@5.8.0 — indirect
- @ethersproject/hash@5.8.0 — indirect
- @ethersproject/hdnode@5.8.0 — indirect
- @ethersproject/json-wallets@5.8.0 — indirect
- @ethersproject/keccak256@5.8.0 — indirect
- @ethersproject/logger@5.8.0 — indirect
- @ethersproject/networks@5.8.0 — indirect
- @ethersproject/pbkdf2@5.8.0 — indirect
- @ethersproject/properties@5.8.0 — indirect
- @ethersproject/providers@5.8.0 — indirect
- @ethersproject/random@5.8.0 — indirect
- @ethersproject/rlp@5.8.0 — indirect
- @ethersproject/sha2@5.8.0 — indirect
- @ethersproject/signing-key@5.8.0 — indirect
- @ethersproject/solidity@5.8.0 — indirect
- @ethersproject/strings@5.8.0 — indirect
- @ethersproject/transactions@5.8.0 — indirect
- @ethersproject/units@5.8.0 — indirect
- @ethersproject/wallet@5.8.0 — indirect
- @ethersproject/web@5.8.0 — indirect
- @ethersproject/wordlists@5.8.0 — indirect
- @ethereumjs/ethash@2.1.0 — indirect
- abstract-level@1.0.4 — indirect
- level@8.0.1 — indirect
- lru-cache@5.1.1 — indirect
- memory-level@1.0.0 — indirect
- tslib@2.8.1 — indirect
- @metamask/json-rpc-engine@7.3.3 — indirect
- @metamask/superstruct@3.4.1 — indirect
- @types/debug@4.1.13 — indirect
- pony-cause@2.1.11 — indirect
- semver@7.8.5 — indirect
- uuid@9.0.1 — indirect
- whatwg-url@5.0.0 — indirect
- @metamask/eth-json-rpc-provider@3.0.2 — indirect
- @metamask/utils@9.3.0 — indirect
- uuid@9.0.1 — indirect
- uuid@9.0.1 — indirect
- call-bind-apply-helpers@1.0.2 — indirect
- es-define-property@1.0.1 — indirect
- get-intrinsic@1.3.1 — indirect
- set-function-length@1.2.2 — indirect
- min-document@2.19.2 — indirect
- process@0.11.10 — indirect
- es-errors@1.3.0 — indirect
- has-tostringtag@1.0.2 — indirect
- function-bind@1.1.2 — indirect
- extsprintf@1.3.0 — indirect
- json-schema@0.4.0 — indirect
- verror@1.10.0 — indirect
- asn1@0.2.6 — indirect
- bcrypt-pbkdf@1.0.2 — indirect
- dashdash@1.14.1 — indirect
- ecc-jsbn@0.1.2 — indirect
- getpass@0.1.7 — indirect
- jsbn@0.1.1 — indirect
- safer-buffer@2.1.2 — indirect
- tweetnacl@0.14.5 — indirect
- object-inspect@1.13.4 — indirect
- side-channel-list@1.0.1 — indirect
- side-channel-map@1.0.1 — indirect
- side-channel-weakmap@1.0.2 — indirect
- tldts-core@6.1.86 — indirect
- @types/node@26.6.6 — indirect
- safe-buffer@5.1.2 — indirect
- bn.js@5.2.5 — indirect
- aes-js@3.0.0 — indirect
- scrypt-js@3.0.1 — indirect
- js-sha3@0.8.0 — indirect
- bech32@1.1.4 — indirect
- ws@8.18.0 — indirect
- hash.js@1.1.7 — indirect
- elliptic@6.6.1 — indirect
- bigint-crypto-utils@3.3.0 — indirect
- buffer@6.0.3 — indirect
- catering@2.1.1 — indirect
- is-buffer@2.0.5 — indirect
- level-supports@4.0.1 — indirect
- level-transcoder@1.0.1 — indirect
- module-error@1.0.2 — indirect
- queue-microtask@1.2.3 — indirect
- browser-level@1.0.1 — indirect
- classic-level@1.4.1 — indirect
- yallist@3.1.1 — indirect
- functional-red-black-tree@1.0.1 — indirect
- @types/ms@2.1.0 — indirect
- tr46@0.0.3 — indirect
- webidl-conversions@3.0.1 — indirect
- uuid@9.0.1 — indirect
- async-function@1.0.0 — indirect
- async-generator-function@1.0.0 — indirect
- es-object-atoms@1.1.2 — indirect
- generator-function@2.0.1 — indirect
- get-proto@1.0.1 — indirect
- gopd@1.2.0 — indirect
- has-symbols@1.1.0 — indirect
- math-intrinsics@1.1.0 — indirect
- define-data-property@1.1.4 — indirect
- has-property-descriptors@1.0.2 — indirect
- dom-walk@0.1.2 — indirect
- core-util-is@1.0.2 — indirect
- undici-types@8.9.0 — indirect
- minimalistic-assert@1.0.1 — indirect
- bn.js@4.12.5 — indirect
- brorand@1.1.0 — indirect
- hmac-drbg@1.0.1 — indirect
- minimalistic-crypto-utils@1.0.1 — indirect
- base64-js@1.5.1 — indirect
- ieee754@1.2.1 — indirect
- run-parallel-limit@1.1.0 — indirect
- napi-macros@2.2.2 — indirect
- node-gyp-build@4.8.4 — indirect
- dunder-proto@1.0.1 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Maintained | 0/10 — project is archived |
|---|---|
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Code-Review | 10/10 — all changesets reviewed |
| Dangerous-Workflow | 10/10 — no dangerous workflow patterns detected |
| Pinned-Dependencies | 0/10 — dependency not pinned by hash detected -- score normalized to 0 |
| Token-Permissions | 0/10 — detected GitHub workflow tokens with excessive permissions |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| License | 10/10 — license file detected |
| Fuzzing | 0/10 — project is not fuzzed |
| Branch-Protection | 8/10 — branch protection is not maximal on development and all release branches |
| Security-Policy | 10/10 — security policy file detected |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
Evidence and freshness
- https://registry.npmjs.org/web3-provider-engine/17.0.1 — retrieved 2026-10-30T07:44:48.647Z
- https://api.deps.dev/v3/systems/npm/packages/web3-provider-engine/versions/17.0.1 — retrieved 2026-10-30T07:44:49.149Z
- https://api.deps.dev/v3/systems/npm/packages/web3-provider-engine/versions/17.0.1:dependencies — retrieved 2026-10-30T07:44:49.194Z
- https://api.deps.dev/v3/projects/github.com%2FMetaMask%2Fweb3-provider-engine — retrieved 2026-10-30T07:44:49.309Z