The alchemist-middleware from carrot

alchemist-middleware's People

Contributors

Stargazers

Watchers

alchemist-middleware's Issues

Update send dependency

See https://nodesecurity.io/advisories/send-directory-traversal

Just for giggles, here's the full list of outdated modules:

$ git clone https://github.com/carrot/alchemist-middleware.git .

$ npm install

$ npm shrinkwrap --dev
wrote npm-shrinkwrap.json

$ # sudo npm i nsp -g
$ nsp audit-shrinkwrap
Name  Installed   Patched  Vulnerable Dependency
qs      0.6.5     >= 1.x   alchemist-middleware > chai-http > superagent
qs      0.6.6     >= 1.x   alchemist-middleware > coveralls > request
send    0.6.0    >= 0.8.4  alchemist-middleware

$ npm outdated --depth 0
Package        Current  Wanted  Latest  Location
coffee-script    1.7.1   1.7.1   1.8.0  coffee-script
send             0.6.0   0.6.0   0.9.1  send

$ travis-lint # http://lint.travis-ci.org/carrot/alchemist-middleware

$ # sudo npm i pjv -g
$ pjv -wr
{ valid: true,
  warnings:
   [ 'Missing recommended field: keywords',
     'Missing recommended field: bugs',
     'Missing recommended field: contributors' ],
  recommendations: [ 'Missing optional field: homepage' ] }

Don't end the request after a file has been found

Just because a file has been found doesn't mean the middleware stack is done doing it's business. Currently, if a file is found, it serves the file and ends the request. However, I'd like for it to simply format the request and pass it on, in case any other middleware have things to say about it.

Recommend Projects