gergelyke / express-security.txt

npm package for express applications

node-security.txt

Usage

Install with:

npm i express-security.txt -S

Add to your app with:

const express = require('express')
const securityTxt = require('express-security.txt')

const app = express()

app.get('/security.txt', securityTxt({
  // your security address
  contact: [
    'mailto:[e-mail]',
    'tel:[phone]'
   ],
  // your pgp key
  encryption: 'https://example.com/security.gpg',
  // if you have a hall of fame for securty resourcers, include link here
  acknowledgements: 'https://acknowledgements.example.com'
}))