express-security-policy

v1.0.3npm· JavaScript

Standard Express.js middleware for implementing organizational security policies including CSP, HSTS, and X-Content-Type-Options.

The verdict

Maintained. Maintained, actively maintained. Catch: 1 low-severity advisory open.

Catch: 1 low-severity advisory open.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceHealthy

PopularityUnknown

Security1 advisory

LicensePermissive

DepsLean

Maintenance

Last published 1 month ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: low).

License

MIT

Dependencies

1 direct dependency

Security advisories

Live from OSV.dev · cached 24h

UNKNOWN
Malicious code in express-security-policy (npm)
MAL-2026-2828 Published 2026-04-17

Recent releases