serve-static
2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed
Your version
1.16.3 is the newest release of 1.x.
In short
1 removed1 new1 faster1 fixed1 changed2 internal
- removed
Remove argument reassignment
Security
1 advisory affects 1.10.0; 1.16.0 fixes them
- Lowserve-static vulnerable to template injection that can lead to XSSGHSA-cm22-4g7w-348p · 10 Sep 2024Fixed in 1.16.0
Release note
Add
fallthroughoptionAllows declaring this middleware is the final destination
Provides better integration with Express patterns
Fix reading options from options prototype
Improve the default redirect response headers
Enable strict mode
- removed
Remove argument reassignment