npmpackage.info

Gathering detailed insights and metrics for fresh

Other packages similar to fresh

import-fresh

3.3.1

Import a module while bypassing the cache

stealthy-require

1.1.1

The closest you can get to require something with bypassing the require cache

@types/fresh

0.5.3

TypeScript definitions for fresh

clear-module

4.1.2

Clear a module from the cache

Gathering detailed insights and metrics for fresh

fresh - 0.5.2 | npmpackage.info

fresh

HTTP request freshness testing

0.5.2

162

MIT

JavaScript

5.8

Installations

npm install fresh

Developer Guide

BETA

Typescript

No

Module System

N/A

Min. Node Version

>= 0.6

Node Version

6.11.1

NPM Version

3.10.10 Score

99.6

Supply Chain

98.9

Quality

82.2

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

9

Total

37

Closed

14

Merged

14

Issues

Open

1

Total

16

Closed

15

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

jshttp

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

162 Stars

220 Commits

33 Forks

12 Watchers

11 Branches

36 Contributors

Updated on Jun 05, 2025

Maintainers

View All 36 Contributors

Package Meta Information

Latest Version

0.5.2

Package Id

fresh@0.5.2

Size

4.13 kB

NPM Version

3.10.10

Node Version

6.11.1

Published on

Sep 14, 2017

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

beautify-benchmark benchmark eslint eslint-config-standard eslint-plugin-import eslint-plugin-markdown eslint-plugin-node eslint-plugin-promise eslint-plugin-standard istanbul mocha

fresh

HTTP response freshness testing

Installation

This is a Node.js module available through the npm registry. Installation is done using the npm install command:

$ npm install fresh

API

1var fresh = require('fresh')

fresh(reqHeaders, resHeaders)

Check freshness of the response using request and response headers.

When the response is still "fresh" in the client's cache true is returned, otherwise false is returned to indicate that the client cache is now stale and the full response should be sent.

When a client sends the Cache-Control: no-cache request header to indicate an end-to-end reload request, this module will return false to make handling these requests transparent.

Known Issues

This module is designed to only follow the HTTP specifications, not to work-around all kinda of client bugs (especially since this module typically does not recieve enough information to understand what the client actually is).

There is a known issue that in certain versions of Safari, Safari will incorrectly make a request that allows this module to validate freshness of the resource even when Safari does not have a representation of the resource in the cache. The module jumanji can be used in an Express application to work-around this issue and also provides links to further reading on this Safari bug.

Example

API usage

1var reqHeaders = { 'if-none-match': '"foo"' }
2var resHeaders = { 'etag': '"bar"' }
3fresh(reqHeaders, resHeaders)
4// => false
5
6var reqHeaders = { 'if-none-match': '"foo"' }
7var resHeaders = { 'etag': '"foo"' }
8fresh(reqHeaders, resHeaders)
9// => true

Using with Node.js http server

1var fresh = require('fresh')
2var http = require('http')
3
4var server = http.createServer(function (req, res) {
5  // perform server logic
6  // ... including adding ETag / Last-Modified response headers
7
8  if (isFresh(req, res)) {
9    // client has a fresh copy of resource
10    res.statusCode = 304
11    res.end()
12    return
13  }
14
15  // send the resource
16  res.statusCode = 200
17  res.end('hello, world!')
18})
19
20function isFresh (req, res) {
21  return fresh(req.headers, {
22    'etag': res.getHeader('ETag'),
23    'last-modified': res.getHeader('Last-Modified')
24  })
25}
26
27server.listen(3000)

License

MIT

High

7.5/10

Summary

Regular Expression Denial of Service in fresh

Affected Versions

< 0.5.2

Patched Versions

0.5.2

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

9

Security-Policy

Determines if the project has published a security policy.

7

SAST

Determines if the project uses static code analysis.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

2

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

1

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

5.8

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More