web3-provider-engine 12.0.5

Web3 ProviderEngine is a tool for composing your own [web3 providers](https://github.com/ethereum/wiki/wiki/JavaScript-API#web3).

web3-provider-engine@12.0.5 was published on 2017-05-08. Its manifest declares 17 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

Deprecated: This package has been deprecated, see the README for details: https://github.com/MetaMask/web3-provider-engine

All web3-provider-engine versions · Permanent reference to 12.0.5 · Latest release

Package specifications

Version	12.0.5
License declaration	ISC
Published	2017-05-08T18:01:01.787Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	17
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	387
Repository stars	602
Repository forks	320

Install web3-provider-engine 12.0.5

npm install web3-provider-engine@12.0.5
pnpm add web3-provider-engine@12.0.5
yarn add web3-provider-engine@12.0.5

Runtime dependencies

xhr ^2.2.0
solc ^0.4.2
tape ^4.4.0
async ^2.1.2
clone ^2.0.0
xtend ^4.0.1
request ^2.67.0
semaphore ^1.0.3
eth-sig-util ^1.2.1
ethereumjs-tx ^1.2.0
ethereumjs-vm ^2.0.2
fetch-ponyfill ^4.0.0
json-rpc-error ^2.0.0
ethereumjs-util ^5.1.1
ethereumjs-block ^1.2.2
eth-block-tracker ^1.0.15
promise-to-callback ^1.0.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

async@2.6.4 — direct
clone@2.1.2 — direct
eth-block-tracker@1.1.3 — direct
eth-sig-util@1.4.2 — direct
ethereumjs-block@1.7.1 — direct
ethereumjs-tx@1.3.7 — direct
ethereumjs-util@5.2.1 — direct
ethereumjs-vm@2.6.0 — direct
fetch-ponyfill@4.1.0 — direct
json-rpc-error@2.0.0 — direct
promise-to-callback@1.0.0 — direct
request@2.88.2 — direct
semaphore@1.1.0 — direct
solc@0.4.26 — direct
tape@4.17.0 — direct
xhr@2.6.0 — direct
xtend@4.0.2 — direct
lodash@4.18.1 — indirect
async-eventemitter@0.2.4 — indirect
babelify@7.3.0 — indirect
eth-query@2.1.2 — indirect
ethjs-util@0.1.6 — indirect
pify@2.3.0 — indirect
ethereum-common@0.2.0 — indirect
merkle-patricia-tree@2.3.2 — indirect
ethereum-common@0.0.18 — indirect
bn.js@4.12.5 — indirect
create-hash@1.2.0 — indirect
elliptic@6.6.1 — indirect
ethereum-cryptography@0.1.3 — indirect
rlp@2.2.7 — indirect
safe-buffer@5.2.1 — indirect
ethereumjs-account@2.0.5 — indirect
ethereumjs-block@2.2.2 — indirect
ethereumjs-common@1.5.2 — indirect
ethereumjs-util@6.2.1 — indirect
fake-merkle-patricia-tree@1.0.1 — indirect
functional-red-black-tree@1.0.1 — indirect
rustbn.js@0.2.0 — indirect
node-fetch@1.7.3 — indirect
inherits@2.0.4 — indirect
is-fn@1.0.0 — indirect
set-immediate-shim@1.0.1 — indirect
aws-sign2@0.7.0 — indirect
aws4@1.13.2 — indirect
caseless@0.12.0 — indirect
combined-stream@1.0.8 — indirect
extend@3.0.2 — indirect
forever-agent@0.6.1 — indirect
form-data@2.3.3 — indirect
har-validator@5.1.5 — indirect
http-signature@1.2.0 — indirect
is-typedarray@1.0.0 — indirect
isstream@0.1.2 — indirect
json-stringify-safe@5.0.1 — indirect
mime-types@2.1.35 — indirect
oauth-sign@0.9.0 — indirect
performance-now@2.1.0 — indirect
qs@6.5.5 — indirect
tough-cookie@2.5.0 — indirect
tunnel-agent@0.6.0 — indirect
uuid@3.4.0 — indirect
fs-extra@0.30.0 — indirect
memorystream@0.3.1 — indirect
require-from-string@1.2.1 — indirect
semver@5.4.1 — indirect
yargs@4.8.1 — indirect
@ljharb/resumer@0.0.1 — indirect
@ljharb/through@2.3.14 — indirect
call-bind@1.0.9 — indirect
deep-equal@1.1.2 — indirect
defined@1.0.1 — indirect
dotignore@0.1.2 — indirect
for-each@0.3.5 — indirect
glob@7.2.3 — indirect
has@1.0.4 — indirect
is-regex@1.1.4 — indirect
minimist@1.2.8 — indirect
mock-property@1.0.3 — indirect
object-inspect@1.12.3 — indirect
resolve@1.22.13 — indirect
string.prototype.trim@1.2.11 — indirect
global@4.4.0 — indirect
is-function@1.0.2 — indirect
parse-headers@2.0.6 — indirect
babel-core@6.26.3 — indirect
object-assign@4.1.1 — indirect
json-rpc-random-id@1.0.1 — indirect
is-hex-prefixed@1.0.0 — indirect
strip-hex-prefix@1.0.0 — indirect
async@1.5.2 — indirect
level-ws@0.0.0 — indirect
levelup@1.3.9 — indirect
memdown@1.4.1 — indirect
readable-stream@2.3.8 — indirect
cipher-base@1.0.7 — indirect
md5.js@1.3.5 — indirect
ripemd160@2.0.3 — indirect
sha.js@2.4.12 — indirect
brorand@1.1.0 — indirect
hash.js@1.1.7 — indirect
hmac-drbg@1.0.1 — indirect
minimalistic-assert@1.0.1 — indirect
minimalistic-crypto-utils@1.0.1 — indirect
@types/pbkdf2@3.1.2 — indirect
@types/secp256k1@4.0.7 — indirect
blakejs@1.2.1 — indirect
browserify-aes@1.2.0 — indirect
bs58check@2.1.2 — indirect
create-hmac@1.1.7 — indirect
keccak@3.0.4 — indirect
pbkdf2@3.1.7 — indirect
randombytes@2.1.0 — indirect
scrypt-js@3.0.1 — indirect
secp256k1@4.0.5 — indirect
setimmediate@1.0.5 — indirect
bn.js@5.2.5 — indirect
ethereumjs-tx@2.1.2 — indirect
ethereumjs-util@5.2.1 — indirect
@types/bn.js@4.11.6 — indirect
checkpoint-store@1.1.0 — indirect
encoding@0.1.14 — indirect
is-stream@1.1.0 — indirect
delayed-stream@1.0.0 — indirect
asynckit@0.4.0 — indirect
ajv@6.15.0 — indirect
har-schema@2.0.0 — indirect
assert-plus@1.0.0 — indirect
jsprim@1.4.2 — indirect
sshpk@1.18.0 — indirect
mime-db@1.52.0 — indirect
psl@1.15.0 — indirect
punycode@2.3.1 — indirect
graceful-fs@4.2.11 — indirect
jsonfile@2.4.0 — indirect
klaw@1.3.1 — indirect
path-is-absolute@1.0.1 — indirect
rimraf@2.7.1 — indirect
cliui@3.2.0 — indirect
decamelize@1.2.0 — indirect
get-caller-file@1.0.3 — indirect
lodash.assign@4.2.0 — indirect
os-locale@1.4.0 — indirect
read-pkg-up@1.0.1 — indirect
require-directory@2.1.1 — indirect
require-main-filename@1.0.1 — indirect
set-blocking@2.0.0 — indirect
string-width@1.0.2 — indirect
which-module@1.0.0 — indirect
window-size@0.2.0 — indirect
y18n@3.2.2 — indirect
yargs-parser@2.4.1 — indirect
call-bind-apply-helpers@1.0.2 — indirect
es-define-property@1.0.1 — indirect
get-intrinsic@1.3.1 — indirect
set-function-length@1.2.2 — indirect
is-arguments@1.2.0 — indirect
is-date-object@1.1.0 — indirect
object-is@1.1.6 — indirect
object-keys@1.1.1 — indirect
regexp.prototype.flags@1.5.4 — indirect
minimatch@3.1.5 — indirect
is-callable@1.2.7 — indirect
fs.realpath@1.0.0 — indirect
inflight@1.0.6 — indirect
once@1.4.0 — indirect
has-tostringtag@1.0.2 — indirect
define-data-property@1.1.4 — indirect
functions-have-names@1.2.3 — indirect
gopd@1.2.0 — indirect
has-property-descriptors@1.0.2 — indirect
hasown@2.0.4 — indirect
isarray@2.0.5 — indirect
es-errors@1.3.0 — indirect
is-core-module@2.17.0 — indirect
path-parse@1.0.7 — indirect
supports-preserve-symlinks-flag@1.0.0 — indirect
call-bound@1.0.4 — indirect
define-properties@1.2.1 — indirect
es-abstract@1.24.2 — indirect
es-object-atoms@1.1.2 — indirect
safe-regex-test@1.1.0 — indirect
min-document@2.19.2 — indirect
process@0.11.10 — indirect
babel-code-frame@6.26.0 — indirect
babel-generator@6.26.1 — indirect
babel-helpers@6.24.1 — indirect
babel-messages@6.23.0 — indirect
babel-register@6.26.0 — indirect
babel-runtime@6.26.0 — indirect
babel-template@6.26.0 — indirect
babel-traverse@6.26.0 — indirect
babel-types@6.26.0 — indirect
babylon@6.18.0 — indirect
convert-source-map@1.9.0 — indirect
debug@2.6.9 — indirect
json5@0.5.1 — indirect
private@0.1.8 — indirect
slash@1.0.0 — indirect
source-map@0.5.7 — indirect
readable-stream@1.0.34 — indirect
xtend@2.1.2 — indirect
deferred-leveldown@1.2.2 — indirect
level-codec@7.0.1 — indirect
level-errors@1.0.5 — indirect
level-iterator-stream@1.3.1 — indirect
prr@1.0.1 — indirect
abstract-leveldown@2.7.2 — indirect
immediate@3.3.0 — indirect
ltgt@2.2.1 — indirect
safe-buffer@5.1.2 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
to-buffer@1.2.2 — indirect
hash-base@3.1.2 — indirect
@types/node@26.6.6 — indirect
buffer-xor@1.0.3 — indirect
evp_bytestokey@1.0.3 — indirect
bs58@4.0.1 — indirect
node-addon-api@2.0.2 — indirect
node-gyp-build@4.8.4 — indirect
readable-stream@3.6.2 — indirect
node-addon-api@5.1.0 — indirect
iconv-lite@0.7.3 — indirect
fast-deep-equal@3.1.3 — indirect
fast-json-stable-stringify@2.1.0 — indirect
json-schema-traverse@0.4.1 — indirect
uri-js@4.4.1 — indirect
extsprintf@1.3.0 — indirect
json-schema@0.4.0 — indirect
verror@1.10.0 — indirect
asn1@0.2.6 — indirect
bcrypt-pbkdf@1.0.2 — indirect
dashdash@1.14.1 — indirect
ecc-jsbn@0.1.2 — indirect
getpass@0.1.7 — indirect
jsbn@0.1.1 — indirect
safer-buffer@2.1.2 — indirect
tweetnacl@0.14.5 — indirect
strip-ansi@3.0.1 — indirect
wrap-ansi@2.1.0 — indirect
lcid@1.0.0 — indirect
find-up@1.1.2 — indirect
read-pkg@1.1.0 — indirect
code-point-at@1.1.0 — indirect
is-fullwidth-code-point@1.0.0 — indirect
camelcase@3.0.0 — indirect
function-bind@1.1.2 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
generator-function@2.0.1 — indirect
get-proto@1.0.1 — indirect
has-symbols@1.1.0 — indirect
math-intrinsics@1.1.0 — indirect
set-function-name@2.0.2 — indirect
brace-expansion@1.1.21 — indirect
wrappy@1.0.2 — indirect
array-buffer-byte-length@1.0.2 — indirect
arraybuffer.prototype.slice@1.0.4 — indirect
available-typed-arrays@1.0.7 — indirect
data-view-buffer@1.0.2 — indirect
data-view-byte-length@1.0.2 — indirect
data-view-byte-offset@1.0.1 — indirect
es-set-tostringtag@2.1.0 — indirect
es-to-primitive@1.3.4 — indirect
function.prototype.name@1.2.0 — indirect
get-symbol-description@1.1.0 — indirect
globalthis@1.0.4 — indirect
has-proto@1.2.0 — indirect
internal-slot@1.1.0 — indirect
is-array-buffer@3.0.5 — indirect
is-data-view@1.0.2 — indirect
is-negative-zero@2.0.3 — indirect
is-regex@1.2.1 — indirect
is-set@2.0.3 — indirect
is-shared-array-buffer@1.0.4 — indirect
is-string@1.1.1 — indirect
is-typed-array@1.1.15 — indirect
is-weakref@1.1.1 — indirect
object-inspect@1.13.4 — indirect
object.assign@4.1.7 — indirect
own-keys@1.0.2 — indirect
safe-array-concat@1.1.4 — indirect
safe-push-apply@1.0.0 — indirect
set-proto@1.0.0 — indirect
stop-iteration-iterator@1.1.0 — indirect
string.prototype.trimend@1.0.10 — indirect
string.prototype.trimstart@1.0.8 — indirect
typed-array-buffer@1.0.3 — indirect
typed-array-byte-length@1.0.3 — indirect
typed-array-byte-offset@1.0.5 — indirect
typed-array-length@1.0.8 — indirect
unbox-primitive@1.1.0 — indirect
which-typed-array@1.1.24 — indirect
is-regex@1.2.1 — indirect
dom-walk@0.1.2 — indirect
chalk@1.1.3 — indirect
esutils@2.0.3 — indirect
js-tokens@3.0.2 — indirect
detect-indent@4.0.0 — indirect
jsesc@1.3.0 — indirect
trim-right@1.0.1 — indirect
core-js@2.6.12 — indirect
home-or-tmp@2.0.0 — indirect
mkdirp@0.5.6 — indirect
source-map-support@0.4.18 — indirect
regenerator-runtime@0.11.1 — indirect
globals@9.18.0 — indirect
invariant@2.2.4 — indirect
to-fast-properties@1.0.3 — indirect
ms@2.0.0 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
object-keys@0.4.0 — indirect
abstract-leveldown@2.6.3 — indirect
errno@0.1.8 — indirect
readable-stream@1.1.14 — indirect
safe-buffer@5.1.2 — indirect
undici-types@8.9.0 — indirect
base-x@3.0.11 — indirect
core-util-is@1.0.2 — indirect
ansi-regex@2.1.1 — indirect
invert-kv@1.0.0 — indirect
path-exists@2.1.0 — indirect
pinkie-promise@2.0.1 — indirect
load-json-file@1.1.0 — indirect
normalize-package-data@2.5.0 — indirect
path-type@1.1.0 — indirect
number-is-nan@1.0.1 — indirect
dunder-proto@1.0.1 — indirect
balanced-match@1.0.2 — indirect
concat-map@0.0.1 — indirect
possible-typed-array-names@1.1.0 — indirect
es-abstract-get@1.0.0 — indirect
is-symbol@1.1.1 — indirect
is-document.all@1.0.0 — indirect
side-channel@1.1.1 — indirect
reflect.getprototypeof@1.0.10 — indirect
has-bigints@1.1.0 — indirect
which-boxed-primitive@1.1.1 — indirect
ansi-styles@2.2.1 — indirect
escape-string-regexp@1.0.5 — indirect
has-ansi@2.0.0 — indirect
supports-color@2.0.0 — indirect
repeating@2.0.1 — indirect
os-homedir@1.0.2 — indirect
os-tmpdir@1.0.2 — indirect
loose-envify@1.4.0 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
pinkie@2.0.4 — indirect
parse-json@2.2.0 — indirect
strip-bom@2.0.0 — indirect
hosted-git-info@2.8.9 — indirect
validate-npm-package-license@3.0.4 — indirect
object-inspect@1.13.4 — indirect
object-inspect@1.13.4 — indirect
side-channel-list@1.0.1 — indirect
side-channel-map@1.0.1 — indirect
side-channel-weakmap@1.0.2 — indirect
which-builtin-type@1.2.1 — indirect
is-bigint@1.1.0 — indirect
is-boolean-object@1.2.2 — indirect
is-number-object@1.1.1 — indirect
is-finite@1.1.0 — indirect
error-ex@1.3.4 — indirect
is-utf8@0.2.1 — indirect
spdx-correct@3.2.0 — indirect
spdx-expression-parse@3.0.1 — indirect
object-inspect@1.13.4 — indirect
object-inspect@1.13.4 — indirect
object-inspect@1.13.4 — indirect
is-async-function@2.1.1 — indirect
is-finalizationregistry@1.1.1 — indirect
is-generator-function@1.1.2 — indirect
is-regex@1.2.1 — indirect
which-collection@1.0.2 — indirect
is-arrayish@0.2.1 — indirect
spdx-license-ids@3.0.24 — indirect
spdx-exceptions@2.5.0 — indirect
is-map@2.0.3 — indirect
is-weakmap@2.0.2 — indirect
is-weakset@2.0.4 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	0/10 — project is archived
Binary-Artifacts	10/10 — no binaries found in the repo
Code-Review	10/10 — all changesets reviewed
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Branch-Protection	8/10 — branch protection is not maximal on development and all release branches
Security-Policy	10/10 — security policy file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/web3-provider-engine/12.0.5 — retrieved 2026-10-30T15:00:50.071Z
https://api.deps.dev/v3/projects/github.com%2FMetaMask%2Fweb3-provider-engine — retrieved 2026-10-30T14:21:27.391Z
https://api.deps.dev/v3/systems/npm/packages/web3-provider-engine/versions/12.0.5 — retrieved 2026-10-30T15:00:50.615Z
https://api.deps.dev/v3/systems/npm/packages/web3-provider-engine/versions/12.0.5:dependencies — retrieved 2026-10-30T15:00:50.657Z