npmpackage.info

Gathering detailed insights and metrics for content-type

content-type

Create and parse HTTP Content-Type header

1.0.5

136

MIT

JavaScript

877.00 B

7,305,836,311 5.7

Installations

npm install content-type

Developer Guide

BETA

Typescript

No

Module System

N/A

Min. Node Version

>= 0.6

Node Version

18.13.0

NPM Version

8.19.3 Score

99.6

Supply Chain

97.6

Quality

79.4

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

9

Total

27

Closed

13

Merged

5

Issues

Open

2

Total

13

Closed

11

Releases

1.0.5

v1.0.5

Updated on Jan 29, 2023

1.0.4

v1.0.4

Updated on Sep 11, 2017

1.0.3

v1.0.3

Updated on Sep 11, 2017

1.0.2

v1.0.2

Updated on May 10, 2016

1.0.1

v1.0.1

Updated on Feb 14, 2015

1.0.0

v1.0.0

Updated on Feb 02, 2015

View All 6 releases

Languages

JavaScript

JavaScript (100%)

Developer

jshttp

Download Statistics

Total Downloads

7,305,836,311

Last Day

2,360,148

Last Week

37,858,965

Last Month

165,831,780

Last Year

1,690,901,190

GitHub Statistics

MIT License

136 Stars

119 Commits

31 Forks

15 Watchers

9 Branches

26 Contributors

Updated on Jun 05, 2025

Bundle Size

1.96 kB

Minified

877.00 B

Minified + Gzipped

Bundlephobia

Maintainers

View All 26 Contributors

Package Meta Information

Latest Version

1.0.5

Package Id

content-type@1.0.5

Unpacked Size

10.23 kB

Size

3.82 kB

File Count

NPM Version

8.19.3

Node Version

18.13.0

Published on

Jan 29, 2023

Total Downloads

Cumulative downloads

Total Downloads

7,305,836,311

Last Day

-3.3%

2,360,148

Compared to previous day

Last Week

-7.3%

37,858,965

Compared to previous week

Last Month

8.1%

165,831,780

Compared to previous month

Last Year

14.8%

1,690,901,190

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

deep-equal eslint eslint-config-standard eslint-plugin-import eslint-plugin-node eslint-plugin-promise eslint-plugin-standard mocha nyc

content-type

Create and parse HTTP Content-Type header according to RFC 7231

Installation

1$ npm install content-type

API

1var contentType = require('content-type')

contentType.parse(string)

1var obj = contentType.parse('image/svg+xml; charset=utf-8')

Parse a Content-Type header. This will return an object with the following properties (examples are shown for the string 'image/svg+xml; charset=utf-8'):

type: The media type (the type and subtype, always lower case). Example: 'image/svg+xml'
parameters: An object of the parameters in the media type (name of parameter always lower case). Example: {charset: 'utf-8'}

Throws a TypeError if the string is missing or invalid.

contentType.parse(req)

1var obj = contentType.parse(req)

Parse the Content-Type header from the given req. Short-cut for contentType.parse(req.headers['content-type']).

Throws a TypeError if the Content-Type header is missing or invalid.

contentType.parse(res)

1var obj = contentType.parse(res)

Parse the Content-Type header set on the given res. Short-cut for contentType.parse(res.getHeader('content-type')).

Throws a TypeError if the Content-Type header is missing or invalid.

contentType.format(obj)

1var str = contentType.format({
2  type: 'image/svg+xml',
3  parameters: { charset: 'utf-8' }
4})

Format an object into a Content-Type header. This will return a string of the content type for the given object with the following properties (examples are shown that produce the string 'image/svg+xml; charset=utf-8'):

type: The media type (will be lower-cased). Example: 'image/svg+xml'
parameters: An object of the parameters in the media type (name of the parameter will be lower-cased). Example: {charset: 'utf-8'}

Throws a TypeError if the object contains an invalid type or parameter names.

License

MIT

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

9

Security-Policy

Determines if the project has published a security policy.

7

SAST

Determines if the project uses static code analysis.

2

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 2

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/codeql.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/codeql.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/codeql.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/jshttp/content-type/codeql.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:177
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:193
Info: 3 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 2 third-party GitHubAction dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned

1

Maintained

Determines if the project is "actively maintained".

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

5.7

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to content-type

Other packages similar to content-type

content-type

Installations

Developer Guide

No

N/A

>= 0.6

18.13.0

8.19.3

Score

Pull Requests

9

27

13

5

Issues

2

13

11

Releases

Languages

Developer

jshttp

Download Statistics

GitHub Statistics

Bundle Size

1.96 kB

877.00 B

Maintainers

Package Meta Information

Total Downloads

7,305,836,311

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

content-type

Installation

API

contentType.parse(string)

contentType.parse(req)

contentType.parse(res)

contentType.format(obj)

License

10

10

10

10

10

9

7

2

1

1

0

0

0

5.7

/10