CodeSampleX

Recordsnpmexpress5.3.0express

Change the conditions
Fixed
OSdebian glibc Symbolexpress Execution contextnode
Filter Runtimenode 22 Package version5.3.0 Architecturex64 Package managernpm libcglibc Clear filters

Current conditions

express @5.3.0debian glibc · x64 · node 22 · npm · node

1 of 1 passed

Verified — this network ran a contract at this coordinate.

there is a sample here, and our run of it at this coordinate came back clean (1)

Project observations
1 / 1
Contract verifications
1 / 1
Independent reporting peers
1
Last recorded
2026-10-21

Dependency Health

Observed combinations and failure evidence for this release

Observed problems 1 · Changed 19 · Steady 9

First observed break

5.3.0

linux · node@22.23 · moduleSystem=esm · executionContext=node

1 FAIL · stage: PROJECT_TEST · fingerprint: sha256:ef96efaca8ddfbeeab2a7eea64a1b583e926d75644ef751cb70b035ace5efbd5

Library Version Health Measured there Projects
accepts 2.0.0 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
body-parser 2.3.0 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
content-disposition 2.0.1 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
content-type 2.1.0 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
cookie 0.7.2 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
cookie-signature 1.2.2 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
debug 4.4.3 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
encodeurl 2.0.0 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
finalhandler 2.1.1 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
fresh 2.0.0 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
http-errors 2.0.1 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
merge-descriptors 2.0.0 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
proxy-addr 2.0.8 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
qs 6.16.1 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
range-parser 1.3.0 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
send 1.2.1 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
serve-static 2.2.1 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
statuses 2.0.2 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
type-is 2.1.0 CANDIDATE Correlated change; unproven combination contract passed 42 project-days
depd 2.0.0 PASS All observations passed contract passed 42 project-days
escape-html 1.0.3 PASS All observations passed contract passed 42 project-days
etag 1.8.1 PASS All observations passed contract passed 42 project-days
mime-types 3.0.2 PASS All observations passed contract passed 42 project-days
on-finished 2.4.1 PASS All observations passed contract passed 42 project-days
once 1.4.0 PASS All observations passed contract passed 42 project-days
parseurl 1.3.3 PASS All observations passed contract passed 42 project-days
router 2.2.0 PASS All observations passed contract passed 42 project-days
vary 1.1.2 PASS All observations passed contract passed 42 project-days

The measured column is about each dependency's own release, not about the pair. A resolver placing two releases side by side is not evidence that they work together.

Dependency versions across releases

What each release of this package resolved its children to. A child whose version moved is listed first: that is where an upgrade changed something underneath you.

Library5.3.05.2.15.1.04.22.24.21.24.21.04.19.14.18.2
accepts 2.0.0 2.0.0 2.0.0 1.3.8 1.3.8 1.3.8 1.3.8 1.3.8
body-parser 2.3.0 2.3.0 2.3.0 1.20.6 1.20.3 1.20.3 1.20.2 1.20.1
content-disposition 2.0.1 1.1.0 1.1.0 0.5.4 0.5.4 0.5.4 0.5.4 0.5.4
content-type 2.1.0 1.0.5 1.0.5 1.0.5 1.0.5 1.0.5 1.0.5 1.0.5
cookie 0.7.2 0.7.2 0.7.2 0.7.2 0.7.1 0.6.0 0.6.0 0.5.0
cookie-signature 1.2.2 1.2.2 1.2.2 1.0.7 1.0.6 1.0.6 1.0.6 1.0.6
debug 4.4.3 4.4.3 4.4.3 2.6.9 2.6.9 2.6.9 2.6.9 2.6.9
encodeurl 2.0.0 2.0.0 2.0.0 2.0.0 2.0.0 2.0.0 1.0.2 1.0.2
finalhandler 2.1.1 2.1.1 2.1.1 1.3.2 1.3.1 1.3.1 1.2.0 1.2.0
fresh 2.0.0 2.0.0 2.0.0 0.5.2 0.5.2 0.5.2 0.5.2 0.5.2
http-errors 2.0.1 2.0.1 2.0.1 2.0.1 2.0.0 2.0.0 2.0.0 2.0.0
merge-descriptors 2.0.0 2.0.0 2.0.0 1.0.3 1.0.3 1.0.3 1.0.1 1.0.1
path-to-regexp — — 8.4.2 0.1.13 0.1.12 0.1.10 0.1.7 0.1.7
proxy-addr 2.0.8 2.0.8 2.0.7 2.0.7 2.0.7 2.0.7 2.0.7 2.0.7
qs 6.16.1 6.16.0 6.15.3 6.15.3 6.13.0 6.13.0 6.11.0 6.11.0
range-parser 1.3.0 1.3.0 1.3.0 1.2.1 1.2.1 1.2.1 1.2.1 1.2.1
send 1.2.1 1.2.1 1.2.1 0.19.2 0.19.0 0.19.0 0.18.0 0.18.0
serve-static 2.2.1 2.2.1 2.2.1 1.16.3 1.16.2 1.16.2 1.15.0 1.15.0
statuses 2.0.2 2.0.2 2.0.2 2.0.2 2.0.1 2.0.1 2.0.1 2.0.1
type-is 2.1.0 2.1.0 2.1.0 1.6.18 1.6.18 1.6.18 1.6.18 1.6.18
array-flatten — — — 1.1.1 1.1.1 1.1.1 1.1.1 1.1.1
depd 2.0.0 2.0.0 — 2.0.0 2.0.0 2.0.0 2.0.0 2.0.0
escape-html 1.0.3 1.0.3 1.0.3 1.0.3 1.0.3 1.0.3 1.0.3 1.0.3
etag 1.8.1 1.8.1 1.8.1 1.8.1 1.8.1 1.8.1 1.8.1 1.8.1
methods — — — 1.1.2 1.1.2 1.1.2 1.1.2 1.1.2
mime-types 3.0.2 3.0.2 3.0.2 — — — — —
on-finished 2.4.1 2.4.1 2.4.1 2.4.1 2.4.1 2.4.1 2.4.1 2.4.1
once 1.4.0 1.4.0 1.4.0 — — — — —
parseurl 1.3.3 1.3.3 1.3.3 1.3.3 1.3.3 1.3.3 1.3.3 1.3.3
router 2.2.0 2.2.0 2.2.0 — — — — —
safe-buffer — — — 5.2.1 5.2.1 5.2.1 5.2.1 5.2.1
setprototypeof — — — 1.2.0 1.2.0 1.2.0 1.2.0 1.2.0
utils-merge — — — 1.0.1 1.0.1 1.0.1 1.0.1 1.0.1
vary 1.1.2 1.1.2 1.1.2 1.1.2 1.1.2 1.1.2 1.1.2 1.1.2

Moved: 20 · unchanged at every release: 14

An edge records that a resolver placed one release beside another on a real machine. It is not a claim that the two work together; that question is answered by samples and contracts, not by presence here.

Recent failure clusters