{"id":1841355,"name":"http-cache-semantics","ecosystem":"npm","description":"Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies","homepage":"https://github.com/kornelski/http-cache-semantics#readme","licenses":"BSD-2-Clause","normalized_licenses":["BSD-2-Clause"],"repository_url":"https://github.com/kornelski/http-cache-semantics","keywords_array":[],"namespace":null,"versions_count":30,"first_release_published_at":"2016-05-31T09:18:22.371Z","latest_release_published_at":"2026-10-04T02:56:05.593Z","latest_release_number":"4.3.0","last_synced_at":"2026-10-10T06:38:59.639Z","created_at":"2022-04-09T17:17:43.490Z","updated_at":"2026-10-10T17:21:52.229Z","registry_url":"https://www.npmjs.com/package/http-cache-semantics","install_command":"npm install http-cache-semantics","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"beta":"4.2.0-beta.1","next":"4.2.0-beta.2","latest":"4.3.0"},"contentPolicy":null},"repo_metadata":{"id":57268082,"uuid":"60075331","full_name":"kornelski/http-cache-semantics","owner":"kornelski","description":"RFC 7234 in JavaScript. Parses HTTP headers to correctly compute cacheability of responses, even in complex cases","archived":false,"fork":false,"pushed_at":"2026-10-04T02:55:02.000Z","size":243,"stargazers_count":261,"open_issues_count":14,"forks_count":45,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-10-08T07:55:39.004Z","etag":null,"topics":["cache","cache-control","fresh","http","perspective","response-age","revalidation","rfc","rfc-7234","usable"],"latest_commit_sha":null,"homepage":"http://httpwg.org/specs/rfc7234.html","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-2-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kornelski.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2016-05-31T09:17:09.000Z","updated_at":"2026-10-07T03:31:12.000Z","dependencies_parsed_at":"2024-09-16T22:38:28.448Z","dependency_job_id":"41adf9a7-fe90-4e0c-8b89-a6cad3b0a1ca","html_url":"https://github.com/kornelski/http-cache-semantics","commit_stats":{"total_commits":109,"total_committers":9,"mean_commits":12.11111111111111,"dds":"0.11009174311926606","last_synced_commit":"eefc7266f0a0614d3762ef89c21e0b8c6bf82020"},"previous_names":["pornel/http-cache-semantics"],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/kornelski/http-cache-semantics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kornelski","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/sbom","scorecard":{"id":567747,"data":{"date":"2025-08-11","repo":{"name":"github.com/kornelski/http-cache-semantics","commit":"f01112e954b83cfa8765b633ba880e5e980aa54c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":1,"reason":"Found 3/29 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 2-Clause \"Simplified\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T15:26:49.358Z","repository_id":57268082,"created_at":"2025-08-20T15:26:49.359Z","updated_at":"2025-08-20T15:26:49.359Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38135206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-09T02:00:07.585Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kornelski","name":"Kornel","uuid":"72159","kind":"user","description":"Image compression, web performance.","email":"","website":"https://kornel.ski","location":"United Kingdom","twitter":null,"company":"@ImageOptim ","icon_url":"https://avatars.githubusercontent.com/u/72159?u=f25bf9f675b806b92a8e5083ce5d0b8f1d7708df\u0026v=4","repositories_count":360,"last_synced_at":"2024-04-14T01:17:52.516Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/kornelski","funding_links":[],"total_stars":13626,"followers":1832,"following":51,"created_at":"2022-11-02T16:24:04.538Z","updated_at":"2024-04-14T01:18:42.409Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kornelski","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kornelski/repositories"},"tags":[{"name":"v4.1.1","sha":"24496504352199caf360d1b4d4a01efdc8a7249e","kind":"tag","published_at":"2023-02-02T17:50:48.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v4.1.1","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"ed83aec75be817967cdac2663907d060fdc6adc3","kind":"tag","published_at":"2020-03-01T23:54:10.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v4.1.0","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.1.0/manifests"},{"name":"v4.0.4","sha":"84cc9a8dd1f5c16e86aa2c82766b30e404385583","kind":"tag","published_at":"2020-02-10T22:15:01.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v4.0.4","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"55f30367b1bdaae8cb4963fa27b187232e2177df","kind":"tag","published_at":"2019-02-10T12:26:46.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v4.0.3","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"d5c28b7a20a32419c973485a81c886b8c60ee1d0","kind":"commit","published_at":"2019-01-09T14:05:27.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v4.0.2","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.0.2/manifests"},{"name":"v4.0.0","sha":"050e2e46821f1a3778d8152e5865c8e72a992adb","kind":"tag","published_at":"2018-04-21T15:57:35.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v4.0.0","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v4.0.0/manifests"},{"name":"v3.8.1","sha":"adfd587c6bb047d44bdd655102f5d7eac43c09ab","kind":"tag","published_at":"2017-12-01T12:50:01.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.8.1","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.8.1/manifests"},{"name":"v3.8.0","sha":"580773ce0f023cd8027d064e601a812ef4b30932","kind":"tag","published_at":"2017-10-12T14:27:05.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.8.0","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.8.0/manifests"},{"name":"v3.7.3","sha":"612aaff9dec6d62816d0ff68b05c8d83c7f5cfa5","kind":"tag","published_at":"2017-04-09T11:36:30.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.7.3","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.7.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.7.3/manifests"},{"name":"v3.7.1","sha":"eb1b53504b20010932274d4dba7265535337b62d","kind":"tag","published_at":"2017-04-02T10:47:31.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.7.1","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.7.1/manifests"},{"name":"v3.7.0","sha":"6a371e24106dca87fc65847e2b514a1eecbbba21","kind":"tag","published_at":"2017-04-01T17:20:49.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.7.0","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.7.0/manifests"},{"name":"v3.6.0","sha":"50211bd99f1af44fb784e2994a65963ea85ab7e6","kind":"tag","published_at":"2017-03-23T13:17:09.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.6.0","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.6.0/manifests"},{"name":"v3.5.1","sha":"dc41aa22677858a6ebcb76c7bdb4ac74bc180b78","kind":"tag","published_at":"2017-03-21T21:12:02.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.5.1","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.5.1/manifests"},{"name":"v3.4.0","sha":"97018be7a9deba05f3f2df4bd47a64d81d69d3f3","kind":"tag","published_at":"2016-12-09T18:17:45.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.4.0","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.4.0/manifests"},{"name":"v3.3.3","sha":"c9fe4786a6d497caf3dd55e0e4c49608e4bd263f","kind":"tag","published_at":"2016-12-08T13:40:46.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.3.3","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.3.3/manifests"},{"name":"v3.3.2","sha":"ed1b3f38f46a50b72f642ce2b63d0f4f0b54c431","kind":"tag","published_at":"2016-12-08T11:59:55.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.3.2","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.3.2/manifests"},{"name":"v3.3.1","sha":"6bf9c9fe908bdfbded1d750190cba051f8b9e580","kind":"tag","published_at":"2016-12-08T11:43:35.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.3.1","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.3.1/manifests"},{"name":"v3.3.0","sha":"a8d20c96ef12bb2374bd0995752e3a72eff388f7","kind":"commit","published_at":"2016-12-08T00:50:22.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.3.0","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.3.0/manifests"},{"name":"v3.2.0","sha":"172071cc0bbbece2dc7ac4556ee4242dfc8e2798","kind":"commit","published_at":"2016-06-05T12:37:40.000Z","download_url":"https://codeload.github.com/kornelski/http-cache-semantics/tar.gz/v3.2.0","html_url":"https://github.com/kornelski/http-cache-semantics/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kornelski/http-cache-semantics@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/tags/v3.2.0/manifests"}]},"repo_metadata_updated_at":"2026-10-10T06:40:26.667Z","dependent_packages_count":625,"downloads":234058399,"downloads_period":"last-month","dependent_repos_count":1320325,"rankings":{"downloads":0.020370591437123324,"dependent_repos_count":0.026695331520423707,"dependent_packages_count":0.09801978137755576,"stargazers_count":3.774337592814217,"forks_count":4.670534342115963,"docker_downloads_count":0.002491564275239546,"average":1.4320748672567536},"purl":"pkg:npm/http-cache-semantics","advisories":[{"uuid":"GSA_kwCzR0hTQS1jaDUyLTR3N2MtYzh4cM4AB6FK","url":"https://github.com/advisories/GHSA-ch52-4w7c-c8xp","title":"http-cache-semantics max-stale handling can disclose cross-user cached responses","description":"http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to obtain another user's Set-Cookie session credentials from shared-cache entries that were deliberately zeroed for security reasons.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-09-18T18:31:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-93748","https://github.com/kornelski/http-cache-semantics/issues/56","https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L425-L441","https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L603-L623","https://www.vulncheck.com/advisories/http-cache-semantics-through-4.2.0-cross-user-cache-disclosure-via-max-stale","https://github.com/advisories/GHSA-ch52-4w7c-c8xp"],"source_kind":"github","identifiers":["GHSA-ch52-4w7c-c8xp","CVE-2026-93748"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-02T23:00:14.928Z","updated_at":"2026-10-10T15:00:37.038Z","epss_percentage":0.00531,"epss_percentile":0.42593,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jaDUyLTR3N2MtYzh4cM4AB6FK","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jaDUyLTR3N2MtYzh4cM4AB6FK","packages":[{"ecosystem":"npm","package_name":"http-cache-semantics","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 4.2.0"}],"purl":"pkg:npm/http-cache-semantics","statistics":{"dependent_packages_count":625,"dependent_repos_count":1320325,"downloads":234058399,"downloads_period":"last-month"},"affected_versions":["1.0.0","2.0.0","3.0.0","3.1.0","3.2.0","3.3.0","3.3.1","3.3.2","3.3.3","3.4.0","3.5.0","3.5.1","3.6.0","3.6.1","3.7.0","3.7.1","3.7.3","3.8.0","3.8.1","4.0.0","4.0.1","4.0.2","4.0.3","4.0.4","4.1.0","4.1.1","4.2.0","4.2.0-beta.1","4.2.0-beta.2"],"unaffected_versions":["4.3.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jaDUyLTR3N2MtYzh4cM4AB6FK/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yYzQ3LTY2NjctMmo1as4AAxS-","url":"https://github.com/advisories/GHSA-rc47-6667-2j5j","title":"http-cache-semantics vulnerable to Regular Expression Denial of Service","description":"http-cache semantics contains an Inefficient Regular Expression Complexity , leading to Denial of Service. This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-01-31T06:30:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-25881","https://github.com/kornelski/http-cache-semantics/blob/master/index.js%23L83","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253332","https://security.snyk.io/vuln/SNYK-JS-HTTPCACHESEMANTICS-3248783","https://github.com/kornelski/http-cache-semantics/commit/560b2d8ef452bbba20ffed69dc155d63ac757b74","https://security.netapp.com/advisory/ntap-20230622-0008","https://github.com/advisories/GHSA-rc47-6667-2j5j"],"source_kind":"github","identifiers":["GHSA-rc47-6667-2j5j","CVE-2022-25881"],"repository_url":"https://github.com/kornelski/http-cache-semantics","blast_radius":1.0,"created_at":"2023-02-02T00:03:01.209Z","updated_at":"2026-10-10T16:18:28.405Z","epss_percentage":0.01613,"epss_percentile":0.74514,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yYzQ3LTY2NjctMmo1as4AAxS-","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yYzQ3LTY2NjctMmo1as4AAxS-","packages":[{"ecosystem":"maven","package_name":"org.webjars.npm:http-cache-semantics","versions":[{"first_patched_version":"4.1.1","vulnerable_version_range":"\u003c 4.1.1"}],"purl":null},{"ecosystem":"npm","package_name":"http-cache-semantics","versions":[{"first_patched_version":"4.1.1","vulnerable_version_range":"\u003c 4.1.1"}],"purl":"pkg:npm/http-cache-semantics"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yYzQ3LTY2NjctMmo1as4AAxS-/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/http-cache-semantics","docker_dependents_count":64528,"docker_downloads_count":13545569952,"usage_url":"https://repos.ecosyste.ms/usage/npm/http-cache-semantics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/http-cache-semantics/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-09T08:16:21.748Z","issues_count":36,"pull_requests_count":26,"avg_time_to_close_issue":18162127.84,"avg_time_to_close_pull_request":3630156.4285714286,"issues_closed_count":25,"pull_requests_closed_count":21,"pull_request_authors_count":15,"issue_authors_count":24,"avg_comments_per_issue":3.388888888888889,"avg_comments_per_pull_request":1.2692307692307692,"merged_pull_requests_count":11,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":4,"past_year_pull_requests_count":7,"past_year_avg_time_to_close_issue":1418051.0,"past_year_avg_time_to_close_pull_request":2706208.75,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":4,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.25,"past_year_avg_comments_per_pull_request":1.4285714285714286,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kornelski%2Fhttp-cache-semantics/issues","maintainers":[{"login":"kornelski","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kornelski"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/http-cache-semantics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/http-cache-semantics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/http-cache-semantics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/http-cache-semantics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/http-cache-semantics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/http-cache-semantics/codemeta","maintainers":[{"uuid":"kornel","login":"kornel","name":null,"email":"npmspam@geekhood.net","url":null,"packages_count":13,"html_url":"https://www.npmjs.com/~kornel","role":null,"created_at":"2022-11-12T18:05:05.283Z","updated_at":"2022-11-12T18:05:05.283Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kornel/packages"}]}