</>PackageGraphPackageGraph

serve-static

npmv2.2.1

Serve static files

Safe to adopt

Yes — serve-static scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 268 days ago. 7 releases in the last 2 years.

  • ?Adoption: grade ?, Not reported by this registry.

    No download data reported for this package yet.

  • BMaintenance: grade B, Good.

    Last published 268 days ago. 7 releases in the last 2 years.

  • BWeight: grade B, Good.

    Pulls in 19 transitive packages, about 445 KB installed.

  • ASupply chain: grade A, Excellent.

    No install scripts, 3 maintainers, and a contained dependency surface.

  • ALicense: grade A, Excellent.

    MIT — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding serve-static to a project.

4
Direct dependencies

Runtime packages this one declares itself.

19
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

445 KB
Install size

Unpacked size of this package plus its entire runtime tree.

3
Tree depth

Longest resolved dependency chain below this package.

Licenses in the dependency tree

ISCMIT

Every license you inherit by installing serve-static, not just its own. Check this before a legal review, not after.

Compatibility

Node.js
node >= 18
Module format
CommonJS only
TypeScript
No bundled types
Install scripts
None

Quick start

A usage example from the serve-static README.

jsFull README ↗
const serveStatic = require('serve-static')

Dependencies

Declared by serve-static v2.2.1. Runtime dependencies are installed with the package; dev dependencies are not.

Runtime (4)

encodeurl ^2.0.0escape-html ^1.0.3parseurl ^1.3.3send ^1.2.0

Dev (10)

eslint 7.32.0eslint-config-standard 14.1.1eslint-plugin-import 2.32.0eslint-plugin-markdown 2.2.1eslint-plugin-node 11.1.0eslint-plugin-promise 5.2.0eslint-plugin-standard 4.1.0mocha ^10.7.0nyc ^17.0.0supertest ^6.3.4

Used by

Popular packages that depend on serve-static.

expressnpm

Fast, unopinionated, minimalist web framework

↓ 92.8M/wk◈ 17 dependents⚖ MIT
@react-native/dev-middlewarenpm

Dev server middleware for React Native

↓ 0/wk◈ 2 dependents⚖ MIT
@react-native-community/cli-server-apinpm

No description provided.

↓ 0/wk◈ 1 dependents⚖ MITTS

Relationship graph

Dependencies (left) and dependents (right) of serve-static.

encodeurlescape-htmlparseurlsendexpress@react-native/dev…@react-native-com…serve-static
serve-static dependencies dependents

Frequently installed together

@react-native/debugger-shellnpm

Experimental debugger shell for React Native for use with @react-native/debugger-frontend

↓ 0/wk◈ 1 dependents⚖ MITTS
opennpm

Open stuff like URLs, files, executables. Cross-platform.

↓ 130.4M/wk◈ 4 dependents⚖ MITTS
debugnpm

Lightweight debugging utility for Node.js and the browser

↓ 0/wk◈ 46 dependents⚖ MIT
connectnpm

High performance middleware framework

↓ 0/wk◈ 7 dependents⚖ MIT
undicinpm

An HTTP/1.1 client, written from scratch for Node.js

↓ 158.5M/wk◈ 15 dependents⚖ MITTS
invariantnpm

invariant

↓ 0/wk◈ 16 dependents⚖ MIT
@isaacs/ttlcachenpm

The time-based use-recency-unaware cousin of [`lru-cache`](http://npm.im/lru-cache)

↓ 0/wk◈ 1 dependents⚖ BlueOak-1.0.0TS
chromium-edge-launchernpm

Launch latest Edge with the Devtools Protocol port open

↓ 0/wk◈ 1 dependents⚖ Apache-2.0TS
@react-native/debugger-frontendnpm

Debugger frontend for React Native based on Chrome DevTools

↓ 0/wk◈ 1 dependents⚖ BSD-3-Clause
chrome-launchernpm

Launch latest Chrome with the Devtools Protocol port open

↓ 0/wk◈ 1 dependents⚖ Apache-2.0TS
nullthrowsnpm

flow typed nullthrows

↓ 0/wk◈ 13 dependents⚖ MITTS
body-parsernpm

Node.js body parsing middleware

↓ 97.1M/wk◈ 5 dependents⚖ MIT

Release history

3 releases in the last two years, typically about 47 days apart.

Recent versions of serve-static
VersionPublishedSizeLicense
2.2.1latest8 months ago14 KBMIT
1.16.38 months ago25 KBMIT
2.2.01 year ago25 KBMIT
1.16.22 years ago25 KBMIT
1.16.12 years ago25 KBMIT
2.1.02 years ago25 KBMIT
1.16.02 years ago25 KBMIT
2.0.02 years ago25 KBMIT
2.0.0-beta.22 years ago25 KBMIT
1.15.04 years ago25 KBMIT
2.0.0-beta.14 years ago25 KBMIT
1.14.24 years ago24 KBMIT
1.14.17 years ago24 KBMIT
1.14.07 years ago24 KBMIT
1.13.28 years ago24 KBMIT

Overview

serve-static is an npm package that serve static files. It has 3 known dependents in the graph. The latest version is 2.2.1, released under the MIT license.

Who should use it

Teams working in the npm ecosystem who need serve static files and value a focused solution.

When not to use it

Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.

Pros

  • Clear open-source license (MIT).

Cons

  • No bundled TypeScript types (may require a separate @types package).

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

dougwilsonulisesgasconwesleytodd

Funding

Frequently asked questions

Should I use serve-static?

Yes — serve-static scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 268 days ago. 7 releases in the last 2 years.

How do I install serve-static?

Run `npm install serve-static` to add serve-static to your npm project.

How many dependencies does serve-static have?

serve-static declares 14 direct dependencies and pulls in 19 packages in total once its runtime tree is resolved totalling about 445 KB on disk.

What license is serve-static released under?

serve-static is distributed under the MIT license. Its dependency tree also includes: ISC, MIT.

How popular is serve-static?

npm does not publish download counts. Within PackageGraph's crawl, 3 known packages depend on serve-static.

Is serve-static still maintained?

The most recent release of serve-static (v2.2.1) was published 8 months ago.

Does serve-static run install scripts?

No. serve-static does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.