Package
csrf-sync
A utility package to help implement stateful CSRF protection using the Synchroniser Token Pattern in express.
Key numbers
As of 25 Sept 2026
- Weekly downloads
- 122.1k
- +137% over 12 months
- Gzip bundle size
- -
- No Bundlephobia data
- Dependencies
- 1
- Direct, from package.json
- Last release
- 1 year ago
- v4.2.1
- GitHub stars
- 42
- 6 forks
- Open issues / PRs
- 1 / 0
- Contributors
- -
- Commits, last 52 weeks
- 0
Downloads
Last week 2026-09-15 to 2026-09-21
122,075 downloads last week, 574,977 in the last month. The 12-month change of +137% compares the average of the last 4 weeks with the first 4 weeks of the series.
- Releases, last 12 months
- -
- Latest version
- 4.2.1, 10 May 20251 year ago
- First published
- -
- Last push to GitHub
- 10 May 2025502 days before the snapshot
- Repository archived
- No
- Open issues
- 1
- Open pull requests
- 0
- Commits, last 52 weeks
- 0
- Dependents on npm
- 13
Major versions
-
Recent releases
-
- Module format
- ESM + CommonJSFrom package.json type, main and exports fields
- TypeScript types
- Bundled
- Node.js engine range
- Not declared
- Runtimes
- -
- Unpacked size (npm)
- 26 kB
- Dependencies (1)
http-errors
npm install csrf-sync- jsDelivr
https://cdn.jsdelivr.net/npm/csrf-sync@4.2.1/ - unpkg
https://unpkg.com/csrf-sync@4.2.1/ - esm.sh
https://esm.sh/csrf-sync@4.2.1
| Package | Weekly downloads | Gzip | Last release | Module | Comparison |
|---|---|---|---|---|---|
| @dr.pogodin/csurf | 19.3k | - | 3 days ago | ESM only | - |
| @sailshq/csurf | 22.8k | - | 1 year ago | - | - |
| express-mongo-sanitize | 202.9k | - | 4 years ago | CommonJS | - |
| sectxt | 5.4k | - | 5 years ago | CommonJS | - |
| helmet-crossdomain | 324.4k | - | 7 years ago | CommonJS | - |
| pompelmi | 5.5k | - | 4 months ago | ESM + CommonJS | - |
Indexability: Indexed.