Package

helmet-csp

Content Security Policy middleware

v4.1.0, 12 Jul 2026MITCommonJSTypes: BundledSecurity

$ npm install helmet-csp

npm GitHub Homepage

Key numbers

As of 25 Sept 2026

Weekly downloads: 416.3k; +5% over 12 months
Gzip bundle size: -; No Bundlephobia data
Dependencies: 0; Direct, from package.json
Last release: 2 months ago; v4.1.0
GitHub stars: 10.7k; 412 forks
Open issues / PRs: 4 / 5
Contributors: -
Commits, last 52 weeks: 74

Downloads

Last week 2026-09-15 to 2026-09-21

Weekly npm downloads, one point per week, weeks starting 23 Sept 2025 to 15 Sept 2026. The y axis starts at zero.

416,257 downloads last week, 1,924,642 in the last month. The 12-month change of +5% compares the average of the last 4 weeks with the first 4 weeks of the series.

Maintenance

Releases, last 12 months: 143 in total
Latest version: 4.1.0, 12 Jul 20262 months ago
First published: 28 Oct 2014
Last push to GitHub: 11 Sept 202613 days before the snapshot
Repository archived: No
Open issues: 4
Open pull requests: 5
Commits, last 52 weeks: 74
Dependents on npm: 54

Major versions

v4 first release 4.0.0, 1 Jun 2024
v3 first release 3.0.0, 2 Aug 2020
v2 first release 2.0.0, 28 Oct 2016
v1 first release 1.0.0, 19 Dec 2015
v0 first release 0.1.0, 28 Oct 2014

Recent releases

Version	Published
4.1.0	12 Jul 2026
4.0.0	1 Jun 2024
3.4.0	2 May 2021
3.3.1	27 Dec 2020
3.3.0	27 Dec 2020
3.2.0	1 Nov 2020
3.1.0	15 Aug 2020
3.0.0	2 Aug 2020
2.10.0	24 Mar 2020
2.9.5	23 Feb 2020
2.9.4	21 Oct 2019
2.9.3	1 Oct 2019
2.9.2	20 Sept 2019
2.9.1	4 Sept 2019

Compatibility

Module format: CommonJSFrom package.json type, main and exports fields
TypeScript types: Bundled
Node.js engine range: >=18.0.0
Runtimes: -
Unpacked size (npm): 18 kB
Dependencies (0): None

Install

npm install helmet-csp

CDN

jsDelivrhttps://cdn.jsdelivr.net/npm/helmet-csp@4.1.0/
unpkghttps://unpkg.com/helmet-csp@4.1.0/
esm.shhttps://esm.sh/helmet-csp@4.1.0

Alternatives

Package	Weekly downloads	Gzip	Last release	Module	Comparison
express-csp-header Content-Security-Policy middleware for Express	16.3k	-	21 days ago	ESM + CommonJS	-
csp-header Content-Security-Policy header generator	114.8k	-	21 days ago	ESM + CommonJS	-
vite-plugin-csp-guard A Vite plugin that lets SPA applications generate a Content Security Policy (CSP).	17.9k	-	5 months ago	ESM only	-
koa-helmet Security header middleware collection for koa	242.7k	-	8 months ago	ESM + CommonJS	-
@nichtsam/helmet Helps secure applications by setting HTTP response headers. Inspired by [`helmet`](https://github.com/helmetjs/helmet) and [`http-helmet`](https://github.com/mcansh/http-helmet).	11.2k	-	6 months ago	ESM only	-

Sources: npm registry, npm downloads API, GitHub API. Data fetched 25 Sept 2026.

Indexability: Indexed.