type-is

Infer the content-type of a request.

Supply chain provenance

Status for the latest visible version.

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): wesleytodd is a known jshttp/Express ecosystem maintainer; transition from jongleberry is a documented, legitimate org handoff, not a compromise.	ai	2026/04/22
maintainer-change	maintainer-added	AI (maintainer-change): wesleytodd and dougwilson are both recognized jshttp maintainers; this is a legitimate team transition within the same org.	ai	2026/04/22
publish-pattern	new-deps-added	AI (publish-pattern): mime-types, media-typer, and content-type are canonical jshttp packages maintained by the same team; their addition in v2.0.0 is a legitimate refactor.	ai	2026/04/22

Version	Deps	Published
2.1.0	3 / 9	2026-05-13
2.0.1	3 / 9	2025-03-27
2.0.0	3 / 9	2024-08-31
1.6.18	2 / 9	2019-04-26
1.6.17	2 / 9	2019-04-25
1.6.16	2 / 9	2018-02-16
1.6.15	2 / 7	2017-04-01
1.6.14	2 / 6	2016-11-19
1.6.13	2 / 6	2016-05-19
1.6.12	2 / 2	2016-02-29
1.6.11	2 / 2	2016-01-30
1.6.10	2 / 2	2015-12-01
1.6.9	2 / 2	2015-09-28
1.6.8	2 / 2	2015-09-04
1.6.7	2 / 2	2015-08-20
1.6.6	2 / 2	2015-07-31
1.6.5	2 / 2	2015-07-17
1.6.4	2 / 2	2015-07-02
1.6.3	2 / 2	2015-06-08
1.6.2	2 / 2	2015-05-11
1.6.1	2 / 2	2015-03-14
1.6.0	2 / 2	2015-02-13
1.5.7	2 / 2	2015-02-10
1.5.6	2 / 2	2015-01-30
1.5.5	2 / 2	2014-12-31
1.5.4	2 / 2	2014-12-11
1.5.3	2 / 2	2014-11-09
1.5.2	2 / 2	2014-09-29
1.5.1	2 / 2	2014-09-08
1.5.0	2 / 3	2014-09-05
1.4.0	2 / 3	2014-09-02
1.3.2	2 / 3	2014-06-25
1.3.1	2 / 3	2014-06-20
1.3.0	2 / 3	2014-06-20
1.2.2	1 / 2	2014-06-20
1.2.1	1 / 2	2014-06-04
1.2.0	1 / 2	2014-05-12
1.1.0	1 / 2	2014-04-13
1.0.1	1 / 2	2014-03-30
1.0.0	1 / 2	2013-12-28