npm package

helmet

Helmet helps secure Node/Express applications by setting various HTTP response headers to mitigate security risks. It is quick to integrate and requires low maintenance afterward. Use it to enhance the security posture of your web applications.

lurq health score: 81/100
Confidence: proven
Weekly downloads: 10,743,483
Latest version: 8.3.0
Last release: Jul 12, 2026
License: MIT

Should you depend on helmet?

lurq's verdict: low

No known advisories

Check this from your coding agent

This page is a daily snapshot. lurq's verify tool checks helmet at the exact version your agent is about to install, and compat checks it against the rest of your stack. One command connects Claude Code, Cursor, VS Code and other agents:

npx lurqrun

Free to start. Quickstart

Upgrading helmet

What each major version removed, renamed or re-signatured, from lurq's extraction of the published packages.

7.2.0 → 8.3.0diff ready
6.2.0 → 7.2.0diff ready
5.1.1 → 6.2.0being extracted

Other utility packages lurq scores

dompurify98/100 · proven
pdfjs-dist95/100 · proven
puppeteer94/100 · proven
puppeteer-core93/100 · proven
@opentelemetry/sdk-trace92/100 · emerging

Scored from public signals (npm registry, GitHub, deps.dev and advisory databases). Data as of Sep 21, 2026; this page refreshes every 168 hours. Source repository.