Vigia

npm · npm:csurf

csurf deprecated

CSRF token middleware

The latest stable version of csurf is 1.11.0, published on 2020-01-19. Verified by Vigia on 2026-11-12.

Latest stable version1.11.0
Published2020-01-19 04:28:49 UTC
Installnpm install csurf@latest
DeprecationThis package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions
Requires (engines){"node":">= 0.8.0"}
Peer dependencies—
Dist-tagslatest: 1.11.0
LicenseMIT
Advisories on latest versionnone known
Last verified2026-11-12 13:09:13 UTC
Sourcesapi.deps.dev, registry.npmjs.org, registry.npmjs.org

Maintenance

Activitydormant
Last stable release2020-01-19 04:28:49 UTC · 2489 days ago
Stable releases in the last 12 months0
Published versions29

Heuristic based only on release dates; it does not measure issue or security response times.

Version history

VersionPublished
1.11.0 withdrawn2020-01-19 04:28:49 UTC
1.10.0 withdrawn2019-04-23 01:54:16 UTC
1.9.0 withdrawn2016-05-27 17:21:12 UTC
1.8.3 withdrawn2015-06-11 01:22:47 UTC
1.8.2 withdrawn2015-05-10 03:41:16 UTC
1.8.1 withdrawn2015-05-04 01:42:18 UTC
1.8.0 withdrawn2015-04-08 03:17:48 UTC
1.7.0 withdrawn2015-02-15 23:20:30 UTC
1.6.6 withdrawn2015-02-01 06:34:58 UTC
1.6.5 withdrawn2015-01-09 02:07:27 UTC
1.6.4 withdrawn2014-12-30 22:59:30 UTC
1.6.3 withdrawn2014-11-09 22:02:51 UTC
1.6.2 withdrawn2014-10-14 23:25:49 UTC
1.6.1 withdrawn2014-09-06 04:50:13 UTC
1.6.0 withdrawn2014-09-04 03:52:17 UTC
1.5.0 withdrawn2014-08-24 18:24:15 UTC
1.4.1 withdrawn2014-08-22 08:39:26 UTC
1.4.0 withdrawn2014-07-30 17:42:29 UTC
1.3.0 withdrawn2014-07-04 01:01:49 UTC
1.2.2 withdrawn2014-06-18 09:22:43 UTC

Showing the 20 most recent of 29 versions. JSON

Give your AI agent these facts

Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.

claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp

Add to CursorAdd to VS Code★ Star on GitHub

Any other MCP client
{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }

Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests

Frequently asked questions

What is the latest version of csurf?

The latest stable version of csurf is 1.11.0, published on 2020-01-19. Verified by Vigia on 2026-11-12.

How do I install the latest version of csurf?

Run npm install csurf@latest. The latest stable version is 1.11.0 (verified 2026-11-12).

Is csurf deprecated?

Yes. The registry marks csurf as deprecated. Message from the maintainers: "This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions"

Which Node.js version does csurf require?

csurf 1.11.0 declares this requirement: {"node":">= 0.8.0"}.

Does csurf 1.11.0 have known vulnerabilities?

No known advisories affect csurf 1.11.0 according to the data Vigia checks.

Is csurf still maintained?

csurf published 0 stable releases in the last 12 months; the most recent was 2489 days ago. Activity: dormant.

Observed changes

No changes observed yet since Vigia started tracking this package.

Related packages

Badges for your README

Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:

[![version](https://vigia.coredls.cloud/badge/npm/csurf/version.svg)](https://vigia.coredls.cloud/npm/csurf)
[![maintained](https://vigia.coredls.cloud/badge/npm/csurf/maintained.svg)](https://vigia.coredls.cloud/npm/csurf)
[![status](https://vigia.coredls.cloud/badge/npm/csurf/status.svg)](https://vigia.coredls.cloud/npm/csurf)

For agents

GET https://vigia.coredls.cloud/v1/packages/npm/csurf
GET https://vigia.coredls.cloud/v1/packages/npm/csurf/versions/{version}