serve-static
Serve static files
84%
Total Score
67
100
100
100
50
Health Score Breakdown
No build provenance attestation or trusted-publisher configuration was observed, leaving publication origin less independently verifiable even though the repository and release evidence are strong.
The repository recorded no commits and no active maintainers in the last three months, which is a maintenance concern, although the recent release and recent push provide some counterevidence.
No issues or pull requests were opened, closed, or merged in the last month, indicating limited recent collaboration activity but not abandonment by itself.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10254 serve-static is vulnerable to Cross-site Scripting (XSS) in versions 1.3.0 - 1.15.0 and 2.0.0 - 2.0.0. | 1.3.0 - 1.15.02.0.0 - 2.0.0 | Low |
CVE-2015-1164 serve-static is vulnerable to URL Redirection to Untrusted Site ('Open Redirect') in versions 0.0.0 - 1.6.5 and 1.7.0 - 1.7.2. | 0.0.0 - 1.6.51.7.0 - 1.7.2 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 send Version ^1.2.0 | — | — |
parseurl Version ^1.3.3 | — | — |
encodeurl Version ^2.0.0 | — | — |
escape-html Version ^1.0.3 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 12 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.