Is express-csrf-local safe to use?

express-csrf-local has no known vulnerabilities on the latest version (0.1.0). DepScope rates its health at 42/100 (high risk).

What is the latest version of express-csrf-local?

The latest version of express-csrf-local is 0.1.0, released 2012-09-15.

Does express-csrf-local have known vulnerabilities?

No known vulnerabilities on the latest version of express-csrf-local.

Is express-csrf-local deprecated?

No, express-csrf-local is actively maintained. Latest release: 0.1.0 (2012-09-15).

What are alternatives to express-csrf-local?

Popular alternatives to express-csrf-local in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does express-csrf-local use?

License information for express-csrf-local is not declared in the registry metadata.

express-csrf-local

npmv0.1.0

Express middleware for including the token generated by Connect's CSRF middleware in the locals object for templates.

1 versions1 maintainers0 deps

jharding/express-csrf-local

/ 100

Health

use with caution

[email protected] low health (42/100) — consider alternatives

Moderate health score (42/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/express-csrf-local