
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
http-directives
Advanced tools
A TypeScript-friendly package that provides strongly-typed HTTP constants
A TypeScript-friendly package that provides strongly-typed constants for common HTTP headers, directives, status codes,
MIME types, caching policies, CSP rules, and more.
Say goodbye to string typos and make your HTTP code safer, cleaner, and more maintainable.
npm i http-directives
The following categories of constants are included in this package:
| Category | Constants examples |
|---|---|
| HTTP Status Codes | OK, NOT_FOUND, INTERNAL_SERVER_ERROR, etc. |
| HTTP Methods | GET, POST, PUT, DELETE, etc. |
| HTTP Headers | CONTENT_TYPE, CACHE_CONTROL, STRICT_TRANSPORT_SECURITY, CONTENT_SECURITY_POLICY, etc. |
| MIME Types | APPLICATION_JSON, APPLICATION_JAVASCRIPT, APPLICATION_ZIP, TEXT_PLAIN, TEXT_HTML, etc. |
| Content Encodings | GZIP, BR, etc. |
| Cache Control | MAX_AGE, NO_CACHE, PRIVATE, etc. |
| Charsets | UTF-8, UTF-16, ISO-8859-1, etc. |
| CSP Directives | SCRIPT_SRC, STYLE_SRC, etc. |
| CSP Sources | SELF, UNSAFE_INLINE, nonce(), sha256(), etc. |
| DNT | !, ?, N, T, etc. |
| Protocols | HTTP, HTTPS, SSH, WSS, MQTT, etc. |
import {
Headers,
MimeTypes,
ContentEncodings,
Charsets,
StatusCodes,
CacheControl,
CSPDirectives,
CSPSources,
Methods,
DNT,
Protocols
} from 'http-directives';
Headers.STRICT_TRANSPORT_SECURITY // "Strict-Transport-Security"
MimeTypes.APPLICATION_JAVASCRIPT // "application/javascript"
ContentEncodings.GZIP // "gzip"
Charsets.UTF_8 // "UTF-8"
StatusCodes.OK // 200
CacheControl.MAX_AGE // "max-age"
CSPDirectives.BASE_URI // "base-uri"
CSPSources.SELF // "self"
Methods.POST // "POST"
DNT.NOT_TRACKING // "N"
Protocols.HTTPS // "https:"
Additionally, exported CSP utility functions:
import {CSPSources} from 'http-directives';
CSPSources.nonce('abc123') // "'nonce-abc123'"
CSPSources.sha256('hash') // "'sha256-hash'"
CSPSources.sha384('hash') // "'sha384-hash'"
CSPSources.sha512('hash') // "'sha512-hash'"
Define and reuse your own constants with full autocompletion and type safety:
import {Headers} from 'http-directives';
class CustomHeaders extends Headers {
public static readonly CUSTOM_HEADER = 'custom-header';
}
CustomHeaders.CUSTOM_HEADER // "custom-header"
Please motivate yourself to submit a PR.
MIT
FAQs
A TypeScript-friendly package that provides strongly-typed HTTP constants
The npm package http-directives receives a total of 14 weekly downloads. As such, http-directives popularity was classified as not popular.
We found that http-directives demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.