krakenjs/lusca
Application security for express apps. observed · 2026-10-20
Health v2 · maintenance only
23/100
- Activity 0
- Release rhythm 8
- Longevity 100
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-22. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 4769
- days_rel: n/a
- days_push: 628
- n_releases_24m: 0
Adoption not part of the score
1776 stars · 118 forks observed · 2026-10-20
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Lusca is web application security middleware for Express/Node.js apps. It provides configurable protections including CSRF tokens, Content Security Policy, HSTS, X-Frame-Options, XSS protection, and referrer policy headers.
Use cases
- add csrf protection to express app
- set content security policy headers in nodejs
- prevent clickjacking with x-frame-options
- enable hsts for express server
- harden express app security headers
When to choose
- you use Express and want drop-in security middleware
- you need per-route CSRF allowlists/blocklists
- you want to configure individual security headers independently
When to avoid
- you use a framework other than Express/Koa-style middleware
- you need a full security audit or vulnerability scanning tool
- your app already uses Helmet and its configuration suffices
Facets
library · maturity maintenance
security middleware web-framework web-development security backend express csrf csp hsts http-headers xss-protection nodejs web-server
2 sources
- readme: https://github.com/krakenjs/lusca · fetched 2026-10-20 · d5e9fb8edc2c
- registry_npm: https://registry.npmjs.org/lusca · fetched 2026-08-29 · bb4cefbf346e
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| krakenjs/lusca | main | 23 |
For agents
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem