webpack-dev-middleware 4.0.4

A development middleware for webpack

webpack-dev-middleware@4.0.4 was published on 2021-01-13. Its manifest declares 6 runtime dependencies and 1 peer requirement. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >= 10.13.0.

All webpack-dev-middleware versions · Permanent reference to 4.0.4 · Latest release

Package specifications

Version	4.0.4
License declaration	MIT
Published	2021-01-13T12:26:45.252Z
Node.js requirement	>= 10.13.0
Type declarations	Not declared
Runtime dependency count	6
Peer requirement count	1
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	47.24 KiB
Published file count	15
Package type	Not declared
ES module entry	Not declared
Default entry	dist/cjs.js
Side effects declaration	Not declared
Direct advisories	2
Resolved graph dependencies	19
Repository stars	2509
Repository forks	386

Install webpack-dev-middleware 4.0.4

npm install webpack-dev-middleware@4.0.4
pnpm add webpack-dev-middleware@4.0.4
yarn add webpack-dev-middleware@4.0.4

Runtime dependencies

mem ^8.0.0
memfs ^3.2.0
colorette ^1.2.1
mime-types ^2.1.28
range-parser ^1.2.1
schema-utils ^3.0.0

Peer requirements

webpack ^4.0.0 || ^5.0.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@types/json-schema@7.0.15 — indirect
ajv@6.15.0 — indirect
ajv-keywords@3.5.2 — indirect
colorette@1.4.0 — direct
fast-deep-equal@3.1.3 — indirect
fast-json-stable-stringify@2.1.0 — indirect
fs-monkey@1.1.0 — indirect
json-schema-traverse@0.4.1 — indirect
map-age-cleaner@0.1.3 — indirect
mem@8.1.1 — direct
memfs@3.5.3 — direct
mime-db@1.52.0 — indirect
mime-types@2.1.35 — direct
mimic-fn@3.1.0 — indirect
p-defer@1.0.0 — indirect
punycode@2.3.1 — indirect
range-parser@1.3.0 — direct
schema-utils@3.3.0 — direct
uri-js@4.4.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	6/10 — Found 2/3 approved changesets -- score normalized to 6
Maintained	10/10 — 24 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Binary-Artifacts	10/10 — no binaries found in the repo
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	10/10 — all dependencies are pinned
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Fuzzing	0/10 — project is not fuzzed
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Security-Policy	10/10 — security policy file detected
License	10/10 — license file detected
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/webpack-dev-middleware/4.0.4 — retrieved 2026-10-29T10:29:40.731Z
https://api.deps.dev/v3/projects/github.com%2Fwebpack%2Fwebpack-dev-middleware — retrieved 2026-10-29T07:19:28.140Z
https://api.deps.dev/v3/systems/npm/packages/webpack-dev-middleware/versions/4.0.4 — retrieved 2026-10-29T10:29:41.328Z
https://api.deps.dev/v3/systems/npm/packages/webpack-dev-middleware/versions/4.0.4:dependencies — retrieved 2026-10-29T10:29:41.358Z