npmpackage.info

Gathering detailed insights and metrics for express-ip-filter-middleware

Other packages similar to express-ip-filter-middleware

express-ipfilter

1.3.2

A light-weight IP address based filtering system

express-ip-access-control

1.1.3

An express.js middleware for access control.

express-ip-filter

2.0.0

Middleware for [express][] that filters IPs against glob patterns, RegExp, string or array of globs. Support custom `403 Forbidden` message, blacklists, whitelists and custom ID.

bluemix-cf-ip-filter

0.1.3

Express middleware for applying IP filtering

Gathering detailed insights and metrics for express-ip-filter-middleware

express-ip-filter-middleware - 2.0.2 | npmpackage.info

express-ip-filter-middleware

Express middleware for access control using IP / CIDR lists

2.0.2

MIT

TypeScript

10.30 kB

6.5

Installations

npm install express-ip-filter-middleware

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

20.19.2

NPM Version

10.8.2 Pull Requests

Open

0

Total

1,068

Closed

283

Merged

785

Issues

Open

1

Total

3

Closed

2

Releases

v2.0.2

Updated on Jun 30, 2025

v2.0.1

Updated on Jun 17, 2024

v2.0.0

Updated on Jan 01, 2024

View All 3 releases

Languages

TypeScript

JavaScript

TypeScript (96.25%)

JavaScript (3.75%)

Developer

sjinks

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

5 Stars

1,020 Commits

2 Forks

2 Watchers

1 Branches

5 Contributors

Updated on Jul 14, 2025

Maintainers

View All 5 Contributors

Package Meta Information

Latest Version

2.0.2

Package Id

express-ip-filter-middleware@2.0.2

Unpacked Size

10.30 kB

Size

3.77 kB

File Count

NPM Version

10.8.2

Node Version

20.19.2

Published on

Jun 30, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

@myrotvorets/eslint-config-myrotvorets-ts @types/express @types/supertest eslint-formatter-gha express node-reporter-gha supertest ts-node typescript

express-ip-filter-middleware

Express middleware for access control using IP / CIDR lists.

Installation

1npm install express-ip-filter-middleware

Usage

1import { BlockList } from 'node:net';
2import express from 'express';
3import { ipFilterMiddleware } from 'express-ip-filter-middleware';
4
5const allow = new BlockList();
6allow.addSubnet('192.168.0.0', 16);
7
8const deny = new BlockList();
9deny.addAddress('192.168.0.1');
10
11const options = {
12    mode: 'whitelist',
13    allow,
14    deny,
15};
16
17const app = express();
18app.use(ipFilterMiddleware(options))

express-ip-filter-middleware generates a middleware that allows or blocks access per the specified options.

Options is an object with the following fields:

mode: 'whitelist' | 'blacklist' (required): operation mode. In blacklist mode, everything is allowed except for the explicitly blacklisted items (specified in deny), unless overridden by allow. In whitelist mode, everything is forbidden except for explicitly allowed items (specified in allow), unless overridden by deny;
allow: net.BlockList: optional list of the allowed addresses;
deny: net.BlockList: optional list of the denied addresses;
ipOverride: (req: express.Request) => string | undefined: optional function to retrieve the IP address to check. If this function is not specified, req.ip is used. If this function returns an invalid IP address, the middleware bails out with an error.

The mode of operation is similar to Apache's mod_access Order directive: whitelist works like Order Allow,Deny: to allow access, the IP address must match the allow list, and must not be listed in the deny list. Consequently, empty allow and deny in allow mode will result in denied access.

blacklist mode works like Order Deny,Allow: the request is allowed if the IP address is listed in the allow list or not listed in the deny list.

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

10

License

Determines if the project has defined a license.

10

SAST

Determines if the project uses static code analysis.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

2

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

6.5

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More