
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
express-useragent-middleware
Advanced tools
The porpouse of this library is to check the user agent on express or browser.
yarn add express-useragent-middleware
or
npm install --save express-useragent-middleware
const express = require('express')
const useragent = require('express-useragent-middleware')
const app = express()
app.use(useragent())
app.get('/', (req, res) => res.send(res.locals.useragent))
app.listen(3000)
import { UserAgent } from 'express-useragent-middleware'
const userAgent = new UserAgent(navigator.userAgent)
const parsedUserAgent = userAgent.getParsed()
The parsed objects looks like the following:
{
browser: 'Chrome',
browserVersion: '40.0.2214.38',
isBot: false,
isCaptive: false,
isChrome: true,
isDesktop: true,
isIECompatibilityMode: false,
isMac: true,
isMobile: false,
isTablet: false,
os: 'OS X Yosemite',
osVersion: '10.10.2',
platform: 'Unknown'
}
This method returns the object with the user agent parsed values.
This method returns the user agent string used to get the parsed values.
This method checks if the user's browser is supported over a list of browsers and versions.
{
Chrome: "> 50", // This checks if the browser version is under 50
IE: "< 10", // This checks if the browser version is over 10
Firefox: "~ 66" // This checks if the major version is equal to 66
}
Run:
yarn
yarn test
Coverage:
yarn test:coverage
FAQs
The porpouse of this library is to check the user agent on express or browser.
The npm package express-useragent-middleware receives a total of 1 weekly downloads. As such, express-useragent-middleware popularity was classified as not popular.
We found that express-useragent-middleware demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.