New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

roosevelt

Package Overview
Dependencies
Maintainers
1
Versions
257
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

roosevelt - npm Package Versions

1
26

0.19.5

Diff

Changelog

Source

0.19.5

  • Fix for Node 15 / npm 7 regression. Config auditor and deprecation checker will no longer run as postinstall scripts to compensate for INIT_CWD being removed from npm. These checks will be run exclusively on application first run instead (or any time the public folder is removed). (Closes https://github.com/rooseveltframework/roosevelt/issues/975)
  • Dropped Node 12 support.
  • Various dependencies updated.
kethinov
published 0.19.4 •

Changelog

Source

0.19.4

  • Fixed bug that caused Roosevelt to not listen to NODE_ENV.
  • Moved symlink creation to a separate step and made happen earlier in the app initialization process to maek it easier to work with the various Roosevelt server starting events.
  • Various dependencies bumped.
kethinov
published 0.19.3 •

Changelog

Source

0.19.3

  • Fixed bug which could cause CSS preprocessor to fail if there are subdirectories in your CSS folder.
  • Various dependencies bumped.
kethinov
published 0.19.2 •

Changelog

Source

0.19.2

  • Breaking: clientViews no longer exports a function, instead exporting a JSON object.
  • Breaking: clientViews will no longer minify templates by default.
  • Fixed bug with clientViews exposeAll feature that would cause it to scoop up any system files that might be present in your views directories.
  • Fixed bug with clientViews blocklist mistakenly defaulting to an object instead of an array which could cause crashes in some configurations.
  • Fixed bug with CSS preprocessor that would cause it to scoop up any system files that might be present in your CSS directories.
  • Various dependencies bumped.
kethinov
published 0.19.1 •

Changelog

Source

0.19.1

  • Added ability to configure helmet dependency.
  • Fixed bug that caused frontend reload not to work.
  • Fixed a bug in the Express env variable that would cause it to be incorrectly set at times.
  • Updated some out of date into in the README.
  • Removed some unnecessary code.
  • Various dependencies bumped.
kethinov
published 0.19.0 •

Changelog

Source

0.19.0

  • Breaking: Production mode behavior changed significantly:
    • localhostOnly and alwaysHostPublic defaults were flipped to false and true respectively.
    • alwaysHostPublic was renamed to hostPublic.
    • The --host-public command line flag was removed, since it is no logner needed because hostPublic defaults to true now.
    • New command line flag added called production-proxy to let you opt-in to localhostOnly and alwaysHostPublic being set to true and false respectively as before.
  • Various dependencies bumped.
kethinov
published 0.18.3 •

Changelog

Source

0.18.3

  • You can now use PHP as your templating engine in a Roosevelt app or any other Express application. PHP should be faster than any JS-based templating engine for complex templates since its parser is written in C rather than JS.
  • Breaking: blacklist/whitelist params throughout the API have been renamed to blocklist/allowlist.
  • README was copyedited to improve the clarity of the default behaviors of some of the API, remove outdated information, and other small improvements.
  • The host-public warning was made more prominent so that production mode default behavior regarding statics is less confusing to people.
  • CI improvements.
    • Breaking: Roosevelt is no longer tested on Node 10.x. We didn't do anything to explicitly break older Node versions, but use at your own risk.
  • Various dependencies bumped.
kethinov
published 0.18.2 •

Changelog

Source

0.18.2

  • Added helmet middleware to improve security by default.
  • Replaced body-parser middleware with native Express integration.
  • Various dependencies bumped.
kethinov
published 0.18.1 •

Changelog

Source

0.18.1

  • Changed passphrase option from https.p12.passphrase to https.passphrase so it can be used for certAndKey configurations as well.
  • CI improvements.
  • Various dependencies bumped.
kethinov
published 0.18.0 •

Changelog

Source

0.18.0

  • Replaced the vnu-jar based HTML validator with express-html-validator 🎉.
    • Roosevelt no longer does any background process management as a result.
  • Moved all developer facing dependencies to optionalDependencies.
    • They can be omitted from installion when using npm i --no-optional.
  • Refactored frontend reload implementation.
  • check-dependencies now only runs in dev mode.
  • API changes:
    • Removed separateProcess from htmlValidator.
    • Removed port from htmlValidator.
    • Removed showWarnings from htmlValidator.
    • Added validatorConfig to htmlValidator which respresents a set of rules for the validator to check for.
      • Rules can also be set in a .htmlValidate.json placed in the app root.
    • Removed verbose from frontendReload.
      • These logs are now controlled by the general verbose logging param.
    • Removed ROOSEVELT_VALIDATOR environment variable.
    • Removed ROOSEVELT_AUTOKILLER environment variable.
    • Removed --attach-validator and -a cli flags.
    • Removed --background-validator and -b cli flags.
    • Removed --disable-validator-autokiller, --no-autokiller, and -n cli flags.
    • Removed --enable-validator-autokiller, --html-validator-autokiller, and -k cli flags.
  • Removed dependencies:
    • execa
    • fkill
    • html-validator
    • prismjs
    • ps-node
    • tamper
    • vnu-jar
  • Various dependencies bumped.
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc