Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
This package has been deprecated with the following message: connect 2.x series is deprecated
Generated on Apr 20, 2024 via pnpm

connect 2.30.2

High performance middleware framework
Package summary
Share
14
issues
2
critical severity
vulnerability
1
license
1
9
high severity
vulnerability
7
license
1
meta
1
1
moderate severity
vulnerability
1
2
low severity
vulnerability
1
license
1
5
licenses
75
MIT
2
ISC
1
N/A
2
other licenses
BSD-3-Clause
1
BSD
1
Package created
28 Dec 2010
Version published
31 Jul 2015
Maintainers
1
Total deps
80
Direct deps
31
License
MIT

Issues

14

2 critical severity issues

critical
Recommendation: Upgrade to version 1.9.1 or later
via: morgan@1.6.1
Recommendation: Check the package code and files for license information
via: body-parser@1.13.3 & others
Collapse
Expand

9 high severity issues

high
Recommendation: Upgrade to version 6.0.4 or later
via: body-parser@1.13.3 & others
Recommendation: Upgrade to version 2.0.0 or later
via: express-session@1.11.3
Recommendation: Upgrade to version 0.6.1 or later
via: compression@1.5.2 & others
Recommendation: Upgrade to version 0.5.2 or later
via: fresh@0.3.0 & others
Recommendation: Upgrade to version 1.4.1 or later
via: serve-static@1.10.3
Recommendation: Upgrade to version 2.6.9 or later
via: body-parser@1.13.3 & others
Recommendation: Upgrade to version 6.2.4 or later
via: body-parser@1.13.3 & others
Recommendation: Validate that the package complies with your license policy
via: multiparty@3.3.2
via: connect@2.30.2
Collapse
Expand

1 moderate severity issue

moderate
Recommendation: Upgrade to version 2.0.0 or later
via: body-parser@1.13.3 & others
Collapse
Expand

2 low severity issues

low
Recommendation: Upgrade to version 2.6.9 or later
via: body-parser@1.13.3 & others
Recommendation: Read and validate the license terms
via: multiparty@3.3.2
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
75 Packages, Including:
accepts@1.2.13
accepts@1.3.8
basic-auth-connect@1.0.0
basic-auth@1.0.4
batch@0.5.3
body-parser@1.13.3
bytes@2.1.0
bytes@2.4.0
compressible@2.0.18
compression@1.5.2
connect-timeout@1.6.2
connect@2.30.2
content-type@1.0.5
cookie-parser@1.3.5
cookie-signature@1.0.6
cookie@0.1.3
core-util-is@1.0.3
crc@3.3.0
csrf@3.0.6
csurf@1.8.3
debug@2.2.0
debug@2.6.9
depd@1.0.1
depd@1.1.2
destroy@1.0.4
ee-first@1.1.1
errorhandler@1.4.3
escape-html@1.0.2
escape-html@1.0.3
etag@1.7.0
express-session@1.11.3
finalhandler@0.4.0
fresh@0.3.0
http-errors@1.3.1
iconv-lite@0.4.11
iconv-lite@0.4.13
isarray@0.0.1
media-typer@0.3.0
method-override@2.3.10
methods@1.1.2
mime-db@1.52.0
mime-types@2.1.35
mime@1.3.4
morgan@1.6.1
ms@0.7.2
ms@2.0.0
multiparty@3.3.2
negotiator@0.5.3
negotiator@0.6.3
on-finished@2.3.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
2 Packages, Including:
base64-url@1.2.1
inherits@2.0.4

N/A

N/A
1 Packages, Including:
ms@0.7.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
qs@4.0.0

BSD

Invalid
Not OSI Approved
1 Packages, Including:
stream-counter@0.2.0
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

31
All Dependencies CSV
β“˜ This is a list of connect 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
basic-auth-connect1.0.02.77 kBMIT
prod
body-parser1.13.311.06 kBMIT
prod
1
3
1
1
bytes2.1.02.31 kBMIT
prod
compression1.5.26.55 kBMIT
prod
1
2
1
1
connect-timeout1.6.23.69 kBMIT
prod
1
1
1
1
content-type1.0.53.82 kBMIT
prod
cookie-parser1.3.53.32 kBMIT
prod
cookie-signature1.0.62.06 kBMIT
prod
cookie0.1.32.77 kBMIT
prod
csurf1.8.36 kBMIT
prod
debug2.2.010.05 kBMIT
prod
1
1
1
1
depd1.0.18.33 kBMIT
prod
errorhandler1.4.35.43 kBMIT
prod
express-session1.11.313.6 kBMIT
prod
1
2
1
1
finalhandler0.4.03.89 kBMIT
prod
1
1
1
1
fresh0.3.02.41 kBMIT
prod
1
http-errors1.3.13.42 kBMIT
prod
method-override2.3.105.65 kBMIT
prod
morgan1.6.17.83 kBMIT
prod
2
1
1
1
multiparty3.3.213.17 kBMIT
prod
1
1
on-headers1.0.23.15 kBMIT
prod
parseurl1.3.33.86 kBMIT
prod
pause0.1.02.23 kBMIT
prod
qs4.0.012.99 kBBSD-3-Clause
prod
2
response-time2.3.23.57 kBMIT
prod
serve-favicon2.3.24.93 kBMIT
prod
1
1
serve-index1.7.361.71 kBMIT
prod
1
2
1
1
serve-static1.10.36.76 kBMIT
prod
1
3
1
1
type-is1.6.185.73 kBMIT
prod
utils-merge1.0.01.65 kBMIT
prod
vhost3.0.23.86 kBMIT
prod

Visualizations

Frequently Asked Questions

What does connect do?

Connect is an extensible HTTP server framework for Node.JS that uses plugins known as middleware to handle requests. This high-performance middleware framework glues together different middleware components, thus providing a simple framework to handle various HTTP requests. Moreover, it offers a high degree of flexibility when it comes to adding new functionalities, enhancing the overall extensibility of your application.

How do you use connect?

To use Connect, you need to install it using npm. You can do this by running:

$ npm install connect

After installation, you need to create an app and "use" middleware. Here is an example of how to set up a basic server using Connect:

var connect = require('connect');
var http = require('http');

var app = connect();

// respond to all requests
app.use(function(req, res){
  res.end('Hello from Connect!\n');
});

//create Node.js http server and listen on port
http.createServer(app).listen(3000);

You can also add various plugins for outgoing response compression, session state storage, body parsing, and many more. These plugins are invoked via the 'use' method. For instance:

var compression = require('compression');
app.use(compression());

You can also mount middleware for basic routing:

app.use('/foo', function fooMiddleware(req, res, next) {
  // req.url starts with "/foo"
  next();
});

Finally, to start the app listening for requests, use the listen() method:

var server = app.listen(port);

Where are the connect docs?

The Connect documentation, which covers the detailed API and usage instructions, can be found in the README.md file on the Connect GitHub repository. Here you find information about how to add a chain of middleware, use routes, create a server, and further information about supported middleware and libraries. For any additional queries, consider looking at the 'Issues' section on the repository, or the list of contributors who might be able to provide additional context or advice.