Version 2.2.1 • License MIT
One-Line Verdict
"Stable for production use."
Healthy
Actively Maintained
2 CVE History
Historical vulnerabilities found.
14.0 KB
Light footprint.
70,471,048
Highly Trusted
Package Payload
4 Direct
Clean dependency structure.
Cold-Start Impact
+1 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 2 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is serve-static too heavy? Compare it with these industry standards:
"Serve static files"
serve-static is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 14.0 KB on disk.
# Install via NPM
npm install serve-static
# Install via Yarn
yarn add serve-static
You are currently viewing a proprietary security audit for serve-static on PAudit. We aggregate global databases to provide a safety rating of 85/100.
Run npm install serve-static. This installs version 2.2.1 and adds 4 direct dependencies to your project.
Yes, serve-static records 70,471,048 weekly downloads, making it a Highly Trusted part of the ecosystem.