Package
csrf-csrf
A utility package to help implement stateless CSRF protection using the Double Submit Cookie Pattern in express.
Key numbers
As of 25 Sept 2026
- Weekly downloads
- 137.6k
- +180% over 12 months
- Gzip bundle size
- -
- No Bundlephobia data
- Dependencies
- 1
- Direct, from package.json
- Last release
- 1 year ago
- v4.0.3
- GitHub stars
- 196
- 25 forks
- Open issues / PRs
- 6 / 2
- Contributors
- -
- Commits, last 52 weeks
- 1
Downloads
Last week 2026-09-15 to 2026-09-21
137,643 downloads last week, 686,867 in the last month. The 12-month change of +180% compares the average of the last 4 weeks with the first 4 weeks of the series.
- Releases, last 12 months
- -
- Latest version
- 4.0.3, 27 May 20251 year ago
- First published
- -
- Last push to GitHub
- 19 Aug 202636 days before the snapshot
- Repository archived
- No
- Open issues
- 6
- Open pull requests
- 2
- Commits, last 52 weeks
- 1
- Dependents on npm
- 27
Major versions
-
Recent releases
-
- Module format
- ESM + CommonJSFrom package.json type, main and exports fields
- TypeScript types
- Bundled
- Node.js engine range
- Not declared
- Runtimes
- -
- Unpacked size (npm)
- 43 kB
- Dependencies (1)
http-errors
npm install csrf-csrf- jsDelivr
https://cdn.jsdelivr.net/npm/csrf-csrf@4.0.3/ - unpkg
https://unpkg.com/csrf-csrf@4.0.3/ - esm.sh
https://esm.sh/csrf-csrf@4.0.3
| Package | Weekly downloads | Gzip | Last release | Module | Comparison |
|---|---|---|---|---|---|
| @dr.pogodin/csurf | 19.3k | - | 3 days ago | ESM only | - |
| @sailshq/csurf | 22.8k | - | 1 year ago | - | - |
| express-mongo-sanitize | 202.9k | - | 4 years ago | CommonJS | - |
| sectxt | 5.4k | - | 5 years ago | CommonJS | - |
| helmet-crossdomain | 324.4k | - | 7 years ago | CommonJS | - |
| pompelmi | 5.5k | - | 4 months ago | ESM + CommonJS | - |
Indexability: Indexed.