Is express-static safe to use?

express-static has no known vulnerabilities on the latest version (1.2.6). DepScope rates its health at 48/100 (high risk).

What is the latest version of express-static?

The latest version of express-static is 1.2.6, released 2018-09-25.

Does express-static have known vulnerabilities?

No known vulnerabilities on the latest version of express-static.

Is express-static deprecated?

No, express-static is actively maintained. Latest release: 1.2.6 (2018-09-25).

What are alternatives to express-static?

Popular alternatives to express-static in npm include: ?, semver, debug, ansi-styles, minimatch.

What license does express-static use?

express-static is licensed under MIT.

express-static

npmv1.2.6

serve static files for express

License MITpermissive10 versions1 maintainers1 deps1,885 weekly dl

song940/kelp-static

/ 100

Health

use with caution

[email protected] low health (48/100) — consider alternatives

Moderate health score (48/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

117.9 KBminified

19.9 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

mime2

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/express-static