esbuild
npmv0.28.2TypeScriptAn extremely fast JavaScript and CSS bundler and minifier.
Adopt with care
esbuild is usable, with caveats. This package runs an install script on your machine, has a single maintainer (bus factor of 1).
- AAdoption: grade A, Excellent.
242.4M downloads per week and 42 known dependents.
- AMaintenance: grade A, Excellent.
Last published 32 days ago. 27 releases in the last 2 years.
- AWeight: grade A, Excellent.
Zero runtime dependencies, about 144 KB installed.
- CSupply chain: grade C, Fair — worth a look.
This package runs an install script on your machine, has a single maintainer (bus factor of 1).
- ALicense: grade A, Excellent.
MIT — permissive, with no copyleft found in the dependency tree.
Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.
Install cost
What you actually take on by adding esbuild to a project.
Runtime packages this one declares itself.
Distinct packages in the full runtime tree, deduplicated the way a package manager would.
Unpacked size of this package plus its entire runtime tree.
Longest resolved dependency chain below this package.
Compatibility
- Node.js
- node >=18
- Module format
- CommonJS only
- TypeScript
- Types included
- Install scripts
- Runs on install
Installing this package executes a script defined by its publisher. That is normal for native modules, but it is also how supply-chain attacks run — review it before installing in CI or on a machine with credentials.
Dependencies
Declared by esbuild v0.28.2. Runtime dependencies are installed with the package; dev dependencies are not.
Used by
Popular packages that depend on esbuild.
An implementation of the WHATWG URL Standard's URL API and parsing machinery
Native-ESM powered web dev build tool
An HTTP/1.1 client, written from scratch for Node.js
Runtime agnostic JS utils
TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files
Simple functions shared among the sinon end user libraries
No description provided.
Fire events the same way the user does
Minimal H(TTP) framework built for high performance and portability.
The official, opinionated, batteries-included toolset for efficient Redux development
A native C++ Node module for querying and subscribing to filesystem events. Used by Parcel 2.
Type safe SQL query builder
🛡️ Faster SQL escape and format for JavaScript (Node.js, Bun, and Deno).
Cybernetically enhanced web apps
tar for node
Fastest Snappy compression library in Node.js
Transpile JSX, TypeScript and esnext features on the fly with esbuild
Polyfill for the URLPattern API
Fake JavaScript timers
Lightweight and fast router for JavaScript.
Minimal module to check if a file is executable.
Generate or verify a Proof Key for Code Exchange (PKCE) challenge pair
Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.
WhatWG/W3C compliant EventSource client for Node.js and browsers
Relationship graph
Dependencies (left) and dependents (right) of esbuild.
Frequently installed together
TypeScript definitions for node
Next generation testing framework powered by Vite
Prettier is an opinionated code formatter
An AST-based pattern checker for JavaScript.
V8 coverage provider for Vitest
A JavaScript implementation of many web standards
TypeScript execution environment and REPL for node.js, with source map support
TypeScript-first schema declaration and validation library with static type inference
Fast, unopinionated, minimalist web framework
Native-ESM powered web dev build tool
Modify strings, generate sourcemaps
React is a JavaScript library for building user interfaces.
Release history
26 releases in the last two years, typically about 21 days apart.
| Version | Published | Size | License |
|---|---|---|---|
| 0.28.2latest | 1 month ago | 144 KB | MIT |
| 0.28.1 | 3 months ago | 144 KB | MIT |
| 0.28.0 | 5 months ago | 143 KB | MIT |
| 0.27.7 | 5 months ago | 140 KB | MIT |
| 0.27.5 | 5 months ago | 140 KB | MIT |
| 0.27.4 | 6 months ago | 140 KB | MIT |
| 0.27.3 | 7 months ago | 132 KB | MIT |
| 0.27.2 | 8 months ago | 132 KB | MIT |
| 0.27.1 | 9 months ago | 132 KB | MIT |
| 0.27.0 | 10 months ago | 132 KB | MIT |
| 0.26.0 | 10 months ago | 132 KB | MIT |
| 0.25.12 | 10 months ago | 132 KB | MIT |
| 0.25.11 | 11 months ago | 132 KB | MIT |
| 0.25.10 | 11 months ago | 132 KB | MIT |
| 0.25.9 | 1 year ago | 132 KB | MIT |
Overview
esbuild is an npm package that an extremely fast JavaScript and CSS bundler and minifier. It is extremely widely used, with about 242.4M downloads per week and 42 known dependents in the graph. The latest version is 0.28.2, released under the MIT license.
Who should use it
Teams working in the npm ecosystem who need an extremely fast JavaScript and CSS bundler and minifier and value a battle-tested, widely-adopted solution.
When not to use it
Consider an alternative if you need to minimize your dependency tree, or if a more actively-maintained option better fits your npm stack.
Pros
- Large, well-established user base (242.4M weekly downloads).
- Ships TypeScript type definitions.
- Clear open-source license (MIT).
Cons
- Large dependency tree (26 direct dependencies) increases install size and audit surface.
Auto-generated from collected registry metadata. No external claims are inferred.
Maintainers
Frequently asked questions
Should I use esbuild?
esbuild is usable, with caveats. This package runs an install script on your machine, has a single maintainer (bus factor of 1).
How do I install esbuild?
Run `npm install esbuild` to add esbuild to your npm project.
What license is esbuild released under?
esbuild is distributed under the MIT license.
How popular is esbuild?
esbuild has approximately 242,434,971 downloads per week and 42 known dependent packages.
Is esbuild still maintained?
The most recent release of esbuild (v0.28.2) was published 1 month ago.
Does esbuild run install scripts?
Yes. esbuild defines a lifecycle script that executes when the package is installed. Review it before installing in CI or on a machine holding credentials.