Security headers middleware for Davaux

Middleware for adding security headers to HTTP responses

Production-oriented Nuxt 4 + Tailwind CSS application framework and Nuxt layer with SSR/SSG, multilingual routing, consent-aware integrations, Pinia stores, SEO, security headers, performance tooling, and reusable responsive components library.

Send security headers such as Strict-Transport-Security in a way compatible with the needs of Apostrophe 2.x

Important security headers for Fastify

Vue 3 + TypeScript browser PDF export component and composable with Canvas/selectable-text rendering, pagination, export-only styling, data-pdf-ignore, auto-fit, SSR-safe imports, progress metrics, security, headers, footers and watermarks.

Scaffold a beautiful, production-ready Next.js app from a Lacspace template — portfolio, business, e-commerce, SaaS, blog, docs, dashboard, restaurant or marketplace — pre-wired with SEO, security headers, sitemap and robots. Use it as a CLI (like create-

Primitive validator for HTTP security header policy validation (CSP, HSTS, CORS, security headers)

observerly's Helemt (HTTP security headers) event handler for the Nitro web server

help secure Express/Connect apps with various HTTP headers

Important security headers for Fastify

Adds Security headers to Etherpad Express responses, including CSP(content security policy), and x-frame-origin, useful for if you embed Etherpad in an iFrame

Security response headers for static hosts — CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy. Generates a Cloudflare/Netlify _headers file, with an Astro integration. Zero dependencies.

Model Context Protocol (MCP) server for analyzing HTTP security headers

Important security headers for ThinkJS 3.x

Zero-dependency JS client for the free Presend API — hashing, UUID, Base64, JWT decode, URL cleaning, IP geo, timestamps, colors, user-agent parsing, password generation/breach check, email validation, favicon fetch, CSV/JSON conversion, security headers,

Devora.js framework internals — SSR/streaming request handling, sessions/CSRF, security headers, islands, backend modules, generic API routes, middleware, config loading. Not a standalone library; used by @devorajs/cli-scaffolded apps.

MCP server exposing TrustSource x402-paid domain verification APIs (trust score, SSL check, security headers, robots.txt) to any MCP-compatible client.

Simple Express static file server with compression and security headers

Read-only MCP server for fyzno.com. Three free reports on any domain: mail security (SPF, DKIM, DMARC, MTA-STS, live STARTTLS), website security (headers, CSP, TLS, cookies) and DNS hygiene (name servers, CAA, SOA). Zero dependencies.