express-security.txt

node-security.txt

Usage

Install with:

npm i express-security.txt -S

Add to your app with:

const express = require('express')
const securityTxt = require('express-security.txt')

const app = express()

app.get('/security.txt', securityTxt({
  // your security address
  contact: [
    'mailto:email@example.com',
    'tel:+123456789'
   ],
  // your pgp key
  encryption: https://example.com/security.gpg',
  // if you have a hall of fame for securty resourcers, include link here
  acknowledgements: 'https://acknowledgements.example.com'
}))