Is koa-csrf safe to use?

koa-csrf has no known vulnerabilities on the latest version (5.0.1). DepScope rates its health at 17/100 (critical risk).

What is the latest version of koa-csrf?

The latest version of koa-csrf is 5.0.1, released 2022-07-02.

Does koa-csrf have known vulnerabilities?

No known vulnerabilities on the latest version of koa-csrf.

Is koa-csrf deprecated?

Yes, koa-csrf is deprecated: Please use SameSite lax or strict see and example usage of in @forwardemail codebase Consider using semver instead.

What are alternatives to koa-csrf?

Popular alternatives to koa-csrf in npm include: semver, minimatch, ansi-styles, debug, brace-expansion.

What license does koa-csrf use?

koa-csrf is licensed under MIT.

koa-csrf

npmv5.0.1deprecated

CSRF tokens for Koa

License MITpermissive26 versions13 maintainers3 deps

koajs/csrf

/ 100

Health

find alternative

koa-csrf is deprecated — find an alternative

Moderate health score (17/100) — verify manually
Package is deprecated

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

15.6 KBminified

5.8 KB gzipped

3 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/koa-csrf (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (3)

csrf is-string-and-not-blank multimatch

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/koa-csrf