---
title: "content-disposition 3.0.0"
description: "Latest published version of content-disposition is 3.0.0, licensed MIT. Current as of our last registry check."
url: https://inlinr.com/packages/content-disposition
lang: en
---

[Packages](https://inlinr.com/packages)

# content-disposition

3.0.0 · 13 Aug 2026 MIT 211.4M / week [Repository](https://github.com/jshttp/content-disposition) [Homepage](https://github.com/jshttp/content-disposition#readme) [npm](https://www.npmjs.com/package/content-disposition) [Atom feed](https://inlinr.com/packages/feed/content-disposition)

Your version 

## Where each line stands

[Plan an upgrade](https://inlinr.com/packages/content-disposition/upgrade)

LineNewestSecurity

- 3.x 3.0.0 No known advisory Latest line
- 2.x 2.0.1 No known advisory [To 3.0.0](https://inlinr.com/packages/content-disposition/upgrade/2.0.1-3.0.0)
- 1.x 1.1.0 No known advisory [To 3.0.0](https://inlinr.com/packages/content-disposition/upgrade/1.1.0-3.0.0)
- 0.x 0.5.4 No known advisory [To 3.0.0](https://inlinr.com/packages/content-disposition/upgrade/0.5.4-3.0.0)

## Latest releases

1. 3.x · latest line
2. ### [3.0.0](https://inlinr.com/packages/content-disposition/releases/3.0.0 "Open this release") [](https://github.com/jshttp/content-disposition/releases/tag/v3.0.0 "Read this release where it was published")  
13 Aug 2026

  - Export package as ESM ([#141](https://github.com/jshttp/content-disposition/pull/141 "https://github.com/jshttp/content-disposition/pull/141"))
  - Reject invalid percent-encoding in ISO-8859-1 ext-value ([#138](https://github.com/jshttp/content-disposition/pull/138 "https://github.com/jshttp/content-disposition/pull/138"))
  - Skip duplicate parameter in extended format ([#144](https://github.com/jshttp/content-disposition/pull/144 "https://github.com/jshttp/content-disposition/pull/144"))
3. 2.x · maintenance
4. ### [2.0.1](https://inlinr.com/packages/content-disposition/releases/2.0.1 "Open this release") [](https://github.com/jshttp/content-disposition/releases/tag/v2.0.1 "Read this release where it was published")  
28 May 2026

  - Use first extended param ([#136](https://github.com/jshttp/content-disposition/issues/136)) [fad11ba](https://github.com/jshttp/content-disposition/commit/fad11ba)
  - Update RFC references ([#134](https://github.com/jshttp/content-disposition/issues/134)) [a43fd35](https://github.com/jshttp/content-disposition/commit/a43fd35)
  - Allow empty param values in quoted text ([#133](https://github.com/jshttp/content-disposition/issues/133)) [5d5d71c](https://github.com/jshttp/content-disposition/commit/5d5d71c)
5. ### [2.0.0](https://inlinr.com/packages/content-disposition/releases/2.0.0 "Open this release") [](https://github.com/jshttp/content-disposition/releases/tag/v2.0.0 "Read this release where it was published")  
11 May 2026

  - Rename exports ([#123](https://github.com/jshttp/content-disposition/issues/123)) [ec3a844](https://github.com/jshttp/content-disposition/commit/ec3a844)
  - Removed `basename` from `create`, pass a filename instead of a full path
  - Refactor parser to be faster and lenient (e.g. now parses unicode)

Dependency tracking · free for 3 projects

## Know when your own dependencies move

content-disposition shipped 2 new majors in the last 12 months, among 5 releases. inlinr shows which of your projects are behind, and what the upgrade breaks.

- Advisories reach you  
An email when a critical or high advisory affects a project, before the next install.
- Upgrades checked first  
Peer ranges, Node, ESM-only and types changes read before you bump.
- Only what matters  
Majors and breaking notes stay; patches and sibling bumps fold into one line.

[How dependency tracking works](https://inlinr.com/dependencies)

## Security

No known security advisory.

## Health

[Details](https://inlinr.com/packages/content-disposition/security#signals)

- **Provenance**:
- **Publisher**:
- **Maintainers**:
- **Scorecard**:
- **Size**:

## Weekly downloads

Reading releases, release notes and advisories…

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.