Continuing the discussion from Information Security with HelmetJS - Install and Require Helmet:
To me it looks like HelmetJS is just being used incorrectly. You need to use functions from helmet, like app.use(helmet.hidePoweredBy());
. But in the example you link to it is called like app.use(helmet());
, which I don’t think should work.