---
title: "negotiator 1.1.0"
description: "Latest published version of negotiator is 1.1.0, licensed MIT. Current as of our last registry check."
url: https://inlinr.com/packages/negotiator
lang: en
---

[Packages](https://inlinr.com/packages)

# negotiator

1.1.0 · 20 Aug 2026 MIT 298.1M / week [Repository](https://github.com/jshttp/negotiator) [Homepage](https://github.com/jshttp/negotiator#readme) [npm](https://www.npmjs.com/package/negotiator) [Atom feed](https://inlinr.com/packages/feed/negotiator)

Your version 

## Where each line stands

[Plan an upgrade](https://inlinr.com/packages/negotiator/upgrade)

LineNewestSecurity

- 1.x 1.1.0 No known advisory Latest line
- 0.6.x and older 0.6.4 5 open advisories, worst high  · last release Oct 2024, no longer updated [To 1.1.0](https://inlinr.com/packages/negotiator/upgrade/0.6.4-1.1.0)

## Latest releases

[All 29 releases](https://inlinr.com/packages/negotiator/releases)

1. 1.x · latest line
2. ### [1.1.0](https://inlinr.com/packages/negotiator/releases/1.1.0 "Open this release") [](https://github.com/jshttp/negotiator/releases/tag/v1.1.0 "Read this release where it was published")  
20 Aug 2026

  - Use `content-type` for accepts parsing ([#108](https://github.com/jshttp/negotiator/issues/108)) [dfb9fac](https://github.com/jshttp/negotiator/commit/dfb9fac)
  - Fix node engines [a63518a](https://github.com/jshttp/negotiator/commit/a63518a)
3. ### [1.0.0](https://inlinr.com/packages/negotiator/releases/1.0.0 "Open this release")  
31 Aug 2024
4. 0.6.x · maintenance
5. ### [0.6.4](https://inlinr.com/packages/negotiator/releases/0.6.4 "Open this release")  
19 Oct 2024

Notes older than 90 days are read on the [Releases tab](https://inlinr.com/packages/negotiator/releases).

Dependency tracking · free for 3 projects

## Know when your own dependencies move

This page watches negotiator. inlinr reads your package.json and keeps the same watch on every dependency you declare, then tells you only what needs you.

- Advisories reach you  
An email when a critical or high advisory affects a project, before the next install.
- Upgrades checked first  
Peer ranges, Node, ESM-only and types changes read before you bump.
- Only what matters  
Majors and breaking notes stay; patches and sibling bumps fold into one line.

[How dependency tracking works](https://inlinr.com/dependencies)

## Security

[Details](https://inlinr.com/packages/negotiator/security)

- [Regular Expression Denial of Service in negotiator](https://inlinr.com/advisories/GHSA-7mc5-chhp-fmc3) High · fixed in 0.6.1

## Health

[Details](https://inlinr.com/packages/negotiator/security#signals)

- **Provenance**:
- **Publisher**:
- **Maintainers**:
- **Scorecard**:
- **Size**:

## Weekly downloads

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.