ua-parser-js AGPL-3.0-or-later 51 versions

ua-parser-js

npm Repository Homepage

Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment

51

Versions

AGPL-3.0-or-later

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

faisalman

Keywords

user-agentclient-hintsbrowserengineosdevicecpuua-parser-jsbrowser-detectiondevice-detectionos-detectionbot-detectionai-detectionapp-detectioncrawler-detection

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	obfuscated-file:dist/ua-parser.pack.mjs	AI (source-diff): Browser distribution bundle minified with uglify-js (listed in devDeps). Standard practice for ua-parser-js; copyright header intact.	ai	2026/04/24
source-diff	source-size-tripled	AI (source-diff): Major version bump (v1→v2) with new modules (enums, extensions, helpers) and dist bundles. Size increase is expected.	ai	2026/04/24
license	copyleft-license:AGPL-3.0-or-later	AI (license): AGPL-3.0-or-later is the intentional license for ua-parser-js v2.x; stable for this package.	ai	2026/04/23

Versions (showing 51 of 77)

View all versions

Version	Deps	Published
2.0.10	3 / 13	2026-05-21
2.0.9	3 / 11	2026-02-03
2.0.8	3 / 11	2026-01-13
2.0.7	3 / 9	2025-12-09
2.0.6	3 / 9	2025-10-10
2.0.5	4 / 9	2025-09-09
2.0.4	5 / 9	2025-06-24
2.0.3	5 / 9	2025-03-14
2.0.2	5 / 10	2025-02-09
2.0.1	3 / 13	2025-02-04
2.0.0	3 / 10	2024-11-18
1.0.39	0 / 8	2024-09-14
1.0.38	0 / 8	2024-05-28
1.0.37	0 / 8	2023-10-27
1.0.36	0 / 8	2023-09-09
1.0.35	0 / 8	2023-04-01
1.0.34	0 / 8	2023-03-05
1.0.33	0 / 8	2023-01-22
0.8.1	0 / 6	2021-10-22
0.7.39	0 / 8	2024-09-11
0.7.38	0 / 8	2024-05-28
0.7.37	0 / 8	2023-10-27
0.7.36	0 / 8	2023-09-09
0.7.35	0 / 8	2023-04-01
0.7.34	0 / 8	2023-03-05
0.7.33	0 / 8	2023-01-22
0.7.32	0 / 8	2022-10-15
0.7.31	0 / 8	2021-10-27
0.7.30	0 / 6	2021-10-22
0.7.28	0 / 6	2021-04-10
0.7.27	0 / 6	2021-04-02
0.7.26	0 / 6	2021-03-27
0.7.25	0 / 5	2021-03-24
0.7.24	0 / 5	2021-02-12
0.7.23	0 / 5	2020-12-10
0.7.22	0 / 5	2020-09-12
0.7.20	0 / 5	2019-06-08
0.7.19	0 / 5	2018-10-25
0.7.18	0 / 5	2018-05-04
0.7.17	0 / 5	2017-10-12
0.7.16	0 / 5	2017-10-12
0.7.15	0 / 5	2017-10-12
0.7.14	0 / 5	2017-07-19
0.7.13	0 / 5	2017-06-22
0.7.12	0 / 5	2016-11-14
0.7.11	0 / 4	2016-11-06
0.7.10	0 / 4	2015-12-12
0.7.9	0 / 4	2015-07-18
0.7.7	0 / 3	2015-05-01
0.7.6	0 / 3	2015-04-14
0.7.4	0 / 3	2015-04-06

v2.0.10

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.8

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.7

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.6

2 findings

HIGH New obfuscated file: dist/ua-parser.pack.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.5

2 findings

HIGH New obfuscated file: dist/ua-parser.pack.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.4

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.3

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.1

2 findings

HIGH New obfuscated file: dist/ua-parser.pack.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.39

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.38

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.37

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.36

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.35

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.34

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.33

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.39

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.38

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.