@fastify/forwarded is a Fastify-focused utility that parses the HTTP X-Forwarded-For header. It returns an array of IP addresses from the request, including the socket address, with index 0 as the socket address and the last entry as the furthest address (typically the end-user).
Project status
- The
fastify/forwardedupstream appears actively maintained, with the most recent activity being an upstream push on 2026-08-07 and the latest tagged update v3.0.2 on 2026-07-28. - Update cadence is irregular, with tagged updates spaced roughly 10 months (2025-09-28 to 2026-07-28) and about 14 months (2024-07-13 to 2025-09-28), though there is evidence of ongoing work between the latest tag and the recent upstream push (2026-08-07).
AI summary generated
Recent updates
v3.0.2
v3.0.2 is a security-focused release (GHSA-2849-m2w7-xm8f) with primarily CI and dependency maintenance changes. It also includes a runtime parsing behavior tweak for X-Forwarded-For handling of optional whitespace (tabs) plus a TypeScript type-test runner migration from tsd to tstyche.
Securityv3.0.1
v3.0.1 contains only tooling, CI, documentation, and type-definition formatting changes, plus some test runner migration work. There are no runtime/library logic changes visible in the provided diff.
v3.0.0
v3.0.0 focuses on development and CI updates, including multiple devDependency bumps (notably tsd and @types/node), and repository hygiene changes in .gitignore. It also updates the CI workflow to run on additional branch patterns and changes test runner configuration via .taprc. No runtime/API code changes are present in the provided diff.
v2.2.0
v2.2.0 is a tooling-focused release that adds CI license checking, updates the tsd dev dependency, and removes the package.json `engines` field. The diff also includes TypeScript typing changes intended for NodeNext/module compatibility.
Breakingv2.1.0
v2.1.0 updates @fastify/forwarded with improved implementation and CI/dev tooling. The release notes mention documentation and general performance improvements, but the code diff shows additional changes including new TypeScript types, updated module export shape for ESM interop, and a behavior change in how invalid X-Forwarded-For header values are handled.
BreakingFeaturesv2.0.0
This v2.0.0 release contains mainly CI and development workflow updates, plus a series of GitHub Actions dependency bumps. No runtime API, functionality, or behavior changes are described in the release notes.