Records/npm/express/failure issue

Where it was measured

PASS means the release recorded a passing observation at PROJECT_PROCESS and no record of this failure. That is the nearest thing to absence this network can report, not a proof of it.

• 5.3.0 PASS 6 passing observations
• 5.2.1 FAIL
• 5.1.0 FAIL
• 4.22.2 not measured
• 4.21.2 not measured
• 4.21.0 not measured

Where it reproduced

• executionContext=node · moduleSystem=esm · os=windows · runtime=node@24.13 ×12 2026-08-13 → 2026-08-14
• executionContext=node · moduleSystem=cjs · os=linux · runtime=node@22.23 ×1 2026-08-21 → 2026-08-21

Nearest known PASS/FAIL boundaries

The two adjacent releases the verdict changes across. Releases nothing measured do not close the gap; they are counted instead.

• Last failing release 5.2.1 → first passing release 5.3.0

  What differs across the boundary

  • content-disposition 2.0.1 → 1.1.0 hypothesis
  • content-type 2.1.0 → 1.0.5 hypothesis
  • proxy-addr 2.0.8 → 2.0.7, 2.0.8 hypothesis
  • qs 6.16.1 → 6.15.3, 6.16.0 hypothesis

  A version that moved across the boundary is a candidate, not a cause. Only a receipt that recorded the failure and the tree it resolved in the same run is marked as evidence.

Dependency versions across releases

What each release of this package resolved its children to. A child whose version moved is listed first: that is where an upgrade changed something underneath you.

Moved: 19 · unchanged at every release: 15

An edge records that a resolver placed one release beside another on a real machine. It is not a claim that the two work together; that question is answered by samples and contracts, not by presence here.

Evidence gaps

• The evidence for this failure was not preserved, so it has no established cause. Its stored hash is provenance, not an identity.
• Releases in this window never measured at PROJECT_PROCESS: 3
• No failure domain was inferred for this failure.

Published answers for the affected releases

• express 5.2.1 Built ? This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOW MIT-0 · 2026-08-20
• express 5.2.1: req.query parses single values as strings, repeated values as arrays, and treats array brackets as literal key characters Built ? This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWreq.querynode MIT-0 · 2026-08-17
• express 5.2.1: Handle Express request header evaluation boundaries across req.is body presence, req.accepts zero-weight quality factors, req.range numeric sentinel codes, and req.get empty-string validation Built ? This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWreq.isreq.acceptsreq.acceptsEncodingsreq.rangereq.getnode MIT-0 · 2026-08-17
• express 5.1.0: urlencoded Built ? This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWexpress.urlencoded MIT-0 · 2026-08-23
• express 5.1.0: Router Built ? This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWexpress.Router MIT-0 · 2026-08-23
• express 5.1.0 Built ? This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOW MIT-0 · 2026-08-20