connect 2.24.1

High performance middleware framework

connect@2.24.1 was published on 2014-07-26. Its manifest declares 29 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >= 0.8.0.

Deprecated: connect 2.x series is deprecated

All connect versions · Permanent reference to 2.24.1 · Latest release

Package specifications

Version	2.24.1
License declaration	MIT
Published	2014-07-26T21:24:00.488Z
Node.js requirement	>= 0.8.0
Type declarations	Not declared
Runtime dependency count	29
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	78
Repository stars	9871
Repository forks	1078

Install connect 2.24.1

npm install connect@2.24.1
pnpm add connect@2.24.1
yarn add connect@2.24.1

Runtime dependencies

basic-auth-connect 1.0.0
body-parser ~1.5.1
bytes 1.0.0
cookie 0.1.2
cookie-parser 1.3.2
cookie-signature 1.0.4
compression ~1.0.9
connect-timeout ~1.2.1
csurf ~1.3.0
debug 1.0.4
depd 0.4.3
errorhandler 1.1.1
express-session ~1.7.1
finalhandler 0.1.0
fresh 0.2.2
media-typer 0.2.0
method-override ~2.1.2
morgan ~1.2.1
multiparty 3.3.1
on-headers 0.0.0
parseurl ~1.2.0
qs 0.6.6
response-time 2.0.0
serve-favicon 2.0.1
serve-index ~1.1.4
serve-static ~1.4.1
type-is ~1.3.2
vhost 2.0.0
pause 0.0.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

basic-auth-connect@1.0.0 — direct
body-parser@1.5.2 — direct
bytes@1.0.0 — direct
compression@1.0.11 — direct
connect-timeout@1.2.2 — direct
cookie@0.1.2 — direct
cookie-parser@1.3.2 — direct
cookie-signature@1.0.4 — direct
csurf@1.3.0 — direct
debug@1.0.4 — direct
depd@0.4.3 — direct
errorhandler@1.1.1 — direct
express-session@1.7.6 — direct
finalhandler@0.1.0 — direct
fresh@0.2.2 — direct
media-typer@0.2.0 — direct
method-override@2.1.3 — direct
morgan@1.2.3 — direct
multiparty@3.3.1 — direct
on-headers@0.0.0 — direct
parseurl@1.2.0 — direct
pause@0.0.1 — direct
qs@0.6.6 — direct
response-time@2.0.0 — direct
serve-favicon@2.0.1 — direct
serve-index@1.1.6 — direct
serve-static@1.4.4 — direct
type-is@1.3.2 — direct
vhost@2.0.0 — direct
depd@0.4.4 — indirect
iconv-lite@0.4.4 — indirect
raw-body@1.3.0 — indirect
accepts@1.0.7 — indirect
compressible@1.1.1 — indirect
on-headers@1.0.2 — indirect
vary@1.0.1 — indirect
ms@0.6.2 — indirect
on-headers@1.0.2 — indirect
csrf-tokens@2.0.0 — indirect
escape-html@1.0.1 — indirect
buffer-crc32@0.2.3 — indirect
depd@0.4.4 — indirect
on-headers@1.0.2 — indirect
parseurl@1.3.3 — indirect
uid-safe@1.0.1 — indirect
utils-merge@1.0.0 — indirect
methods@1.1.0 — indirect
parseurl@1.3.3 — indirect
basic-auth@1.0.0 — indirect
depd@0.4.4 — indirect
on-finished@2.1.0 — indirect
readable-stream@1.1.14 — indirect
stream-counter@0.2.0 — indirect
batch@0.5.1 — indirect
parseurl@1.3.3 — indirect
send@0.7.4 — indirect
mime-types@1.0.2 — indirect
negotiator@0.4.7 — indirect
base64-url@1.3.3 — indirect
rndm@1.2.0 — indirect
scmp@0.0.3 — indirect
uid-safe@1.1.0 — indirect
mz@1.3.0 — indirect
ee-first@1.0.5 — indirect
core-util-is@1.0.3 — indirect
inherits@2.0.4 — indirect
isarray@0.0.1 — indirect
string_decoder@0.10.31 — indirect
depd@0.4.4 — indirect
finished@1.2.2 — indirect
mime@1.2.11 — indirect
range-parser@1.0.3 — indirect
base64-url@1.2.1 — indirect
native-or-bluebird@1.1.2 — indirect
thenify@3.3.1 — indirect
thenify-all@1.6.0 — indirect
ee-first@1.0.3 — indirect
any-promise@1.3.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	0/10 — Found 1/30 approved changesets -- score normalized to 0
Binary-Artifacts	10/10 — no binaries found in the repo
Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Security-Policy	10/10 — security policy file detected
Fuzzing	0/10 — project is not fuzzed
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
License	10/10 — license file detected
Branch-Protection	0/10 — branch protection not enabled on development/release branches
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/connect/2.24.1 — retrieved 2026-10-29T11:23:42.287Z
https://api.deps.dev/v3/projects/github.com%2Fsenchalabs%2Fconnect — retrieved 2026-10-29T07:15:39.066Z
https://api.deps.dev/v3/systems/npm/packages/connect/versions/2.24.1 — retrieved 2026-10-29T11:23:42.808Z
https://api.deps.dev/v3/systems/npm/packages/connect/versions/2.24.1:dependencies — retrieved 2026-10-29T11:23:42.843Z