{"_id":"hide-powered-by","_rev":"1753853","name":"hide-powered-by","description":"Middleware to remove the X-Powered-By header","dist-tags":{"latest":"1.1.0"},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"time":{"modified":"2021-11-29T01:35:12.000Z","created":"2014-10-28T14:05:43.752Z","1.1.0":"2019-05-26T19:07:41.569Z","1.0.0":"2015-12-18T18:42:55.823Z","0.1.0":"2014-10-28T14:05:43.752Z"},"users":{"hugovila":true,"rocket0191":true,"astesio":true,"colkito":true},"author":{"name":"Adam Baldwin","email":"adam@npmjs.com","url":"https://evilpacket.net"},"repository":{"type":"git","url":"git://github.com/helmetjs/hide-powered-by.git"},"versions":{"1.1.0":{"name":"hide-powered-by","author":{"name":"Adam Baldwin","email":"adam@npmjs.com","url":"https://evilpacket.net"},"contributors":[{"name":"Evan Hahn","email":"me@evanhahn.com","url":"https://evanhahn.com"}],"description":"Middleware to remove the X-Powered-By header","version":"1.1.0","license":"MIT","keywords":["helmet","security","express","connect","x-powered-by","powered-by"],"homepage":"https://helmetjs.github.io/docs/hide-powered-by/","repository":{"type":"git","url":"git://github.com/helmetjs/hide-powered-by.git"},"bugs":{"url":"https://github.com/helmetjs/hide-powered-by/issues","email":"me@evanhahn.com"},"engines":{"node":">=4.0.0"},"main":"./dist/index.js","typings":"./dist/index.d.ts","scripts":{"pretest":"npm run lint","prepublishOnly":"npm run build","lint":"eslint --fix '**/*.ts'","test":"jest --config test/jest-config.json","clean":"rm -rf dist","build":"npm run clean && tsc"},"devDependencies":{"@types/connect":"^3.4.32","@types/jest":"^24.0.12","@types/supertest":"^2.0.7","@typescript-eslint/eslint-plugin":"^1.7.0","@typescript-eslint/parser":"^1.7.0","connect":"^3.7.0","eslint":"^5.16.0","eslint-config-helmet":"^0.2.0","jest":"^24.7.1","supertest":"^4.0.2","ts-jest":"^24.0.2","typescript":"^3.4.5"},"gitHead":"d3150d68cc9b094fc05c628d03c2eecd607cb3a3","_id":"hide-powered-by@1.1.0","_nodeVersion":"12.1.0","_npmVersion":"6.9.0","dist":{"shasum":"be3ea9cab4bdb16f8744be873755ca663383fa7a","size":2568,"noattachment":false,"key":"/hide-powered-by/-/hide-powered-by-1.1.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/hide-powered-by/download/hide-powered-by-1.1.0.tgz"},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"_npmUser":{"name":"evanhahn","email":"me@evanhahn.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/hide-powered-by_1.1.0_1558897661422_0.8812937730796657"},"_hasShrinkwrap":false,"publish_time":1558897661569,"_cnpm_publish_time":1558897661569},"1.0.0":{"name":"hide-powered-by","author":{"name":"Adam Baldwin","email":"baldwin@andyet.net","url":"http://andyet.net/team/baldwin"},"contributors":[{"name":"Evan Hahn","email":"me@evanhahn.com","url":"http://evanhahn.com"}],"description":"Middleware to remove the X-Powered-By header.","version":"1.0.0","license":"MIT","keywords":["helmet","security","express","connect","x-powered-by","powered-by"],"repository":{"type":"git","url":"git://github.com/helmetjs/hide-powered-by.git"},"bugs":{"url":"https://github.com/helmetjs/hide-powered-by/issues"},"scripts":{"test":"standard && mocha"},"devDependencies":{"connect":"^3.3.1","mocha":"^2.0.1","standard":"^5.4.1","supertest":"^1.1.0"},"standard":{"globals":["describe","it"]},"gitHead":"3f6f41a027c3a239243ee74e0b36e5efc2b3eb23","homepage":"https://github.com/helmetjs/hide-powered-by#readme","_id":"hide-powered-by@1.0.0","_shasum":"4a85ad65881f62857fc70af7174a1184dccce32b","_from":".","_npmVersion":"3.5.3","_nodeVersion":"5.3.0","_npmUser":{"name":"evanhahn","email":"me@evanhahn.com"},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"dist":{"shasum":"4a85ad65881f62857fc70af7174a1184dccce32b","size":3385,"noattachment":false,"key":"/hide-powered-by/-/hide-powered-by-1.0.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/hide-powered-by/download/hide-powered-by-1.0.0.tgz"},"directories":{},"publish_time":1450464175823,"_cnpm_publish_time":1450464175823,"_hasShrinkwrap":false},"0.1.0":{"name":"hide-powered-by","author":{"name":"Adam Baldwin","email":"baldwin@andyet.net","url":"http://andyet.net/team/baldwin"},"contributors":[{"name":"Evan Hahn","email":"me@evanhahn.com","url":"http://evanhahn.com"}],"description":"Middleware to remove the X-Powered-By header.","version":"0.1.0","keywords":["helmet","security","express","connect","x-powered-by","powered-by"],"repository":{"type":"git","url":"git://github.com/helmetjs/hide-powered-by.git"},"bugs":{"url":"https://github.com/helmetjs/hide-powered-by/issues"},"scripts":{"test":"mocha"},"devDependencies":{"connect":"^3.3.1","mocha":"^2.0.1","supertest":"^0.14.0"},"gitHead":"2387e4be7ff19060f2d9589548abf413fa3a2e2f","homepage":"https://github.com/helmetjs/hide-powered-by","_id":"hide-powered-by@0.1.0","_shasum":"9c6190f6a41a89ea5db158e1d7acc767a61ca66c","_from":".","_npmVersion":"1.4.28","_npmUser":{"name":"evanhahn","email":"me@evanhahn.com"},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"dist":{"shasum":"9c6190f6a41a89ea5db158e1d7acc767a61ca66c","size":2213,"noattachment":false,"key":"/hide-powered-by/-/hide-powered-by-0.1.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/hide-powered-by/download/hide-powered-by-0.1.0.tgz"},"directories":{},"publish_time":1414505143752,"_cnpm_publish_time":1414505143752,"_hasShrinkwrap":false}},"readme":"Hide X-Powered-By\n=================\n[![Build Status](https://travis-ci.org/helmetjs/hide-powered-by.svg?branch=master)](https://travis-ci.org/helmetjs/hide-powered-by)\n\nSimple middleware to remove the `X-Powered-By` HTTP header if it's set.\n\nHackers can exploit known vulnerabilities in Express/Node if they see that your site is powered by Express (or whichever framework you use). For example, `X-Powered-By: Express` is sent in every HTTP request coming from Express, by default. This won't provide much security benefit ([as discussed here](https://github.com/expressjs/express/pull/2813#issuecomment-159270428)), but might help a tiny bit. It will also improve performance by reducing the number of bytes sent.\n\n```javascript\nconst hidePoweredBy = require('hide-powered-by')\napp.use(hidePoweredBy())\n```\n\nYou can also explicitly set the header to something else, if you want. This could throw people off:\n\n```javascript\napp.use(hidePoweredBy({ setTo: 'PHP 4.2.0' }))\n```\n\nNote: if you're using Express, you don't need this middleware and can just do this:\n\n```javascript\napp.disable('x-powered-by')\n```\n","_attachments":{},"homepage":"https://helmetjs.github.io/docs/hide-powered-by/","bugs":{"url":"https://github.com/helmetjs/hide-powered-by/issues","email":"me@evanhahn.com"},"license":"MIT"}