Gathering detailed insights and metrics for decompress-zip
Gathering detailed insights and metrics for decompress-zip
Gathering detailed insights and metrics for decompress-zip
Gathering detailed insights and metrics for decompress-zip
npm install decompress-zip
Typescript
Module System
Min. Node Version
Node Version
NPM Version
73.3
Supply Chain
87.5
Quality
80.8
Maintenance
100
Vulnerability
98.9
License
JavaScript (100%)
Total Downloads
91,234,294
Last Day
21,842
Last Week
82,672
Last Month
341,132
Last Year
4,279,218
MIT License
102 Stars
87 Commits
74 Forks
16 Watchers
2 Branches
63 Contributors
Updated on Jan 26, 2025
Minified
Minified + Gzipped
Latest Version
0.3.3
Package Id
decompress-zip@0.3.3
Size
9.32 kB
NPM Version
6.14.11
Node Version
15.5.0
Published on
Jan 11, 2021
Cumulative downloads
Total Downloads
Last Day
128.2%
21,842
Compared to previous day
Last Week
16.2%
82,672
Compared to previous week
Last Month
-3.7%
341,132
Compared to previous month
Last Year
-34.1%
4,279,218
Compared to previous year
Extract files from a ZIP archive
Extracts the contents of the ZIP archive file
.
Returns an EventEmitter with two possible events - error
on an error, and extract
when the extraction has completed. The value passed to the extract
event is a basic log of each file and how it was compressed.
Options
.
)false
)null
)--strip-components
for tar.options.path
. Setting to false
has significant security implications if you are extracting untrusted data. (default true
)1var DecompressZip = require('decompress-zip'); 2var unzipper = new DecompressZip(filename) 3 4unzipper.on('error', function (err) { 5 console.log('Caught an error'); 6}); 7 8unzipper.on('extract', function (log) { 9 console.log('Finished extracting'); 10}); 11 12unzipper.on('progress', function (fileIndex, fileCount) { 13 console.log('Extracted file ' + (fileIndex + 1) + ' of ' + fileCount); 14}); 15 16unzipper.extract({ 17 path: 'some/path', 18 filter: function (file) { 19 return file.type !== "SymbolicLink"; 20 } 21});
If path
does not exist, decompress-zip will attempt to create it first.
Much like extract, except:
list
1var DecompressZip = require('decompress-zip'); 2var unzipper = new DecompressZip(filename) 3 4unzipper.on('error', function (err) { 5 console.log('Caught an error'); 6}); 7 8unzipper.on('list', function (files) { 9 console.log('The archive contains:'); 10 console.log(files); 11}); 12 13unzipper.list();
MIT © Bower team
0/10
Summary
Arbitrary File Overwrite in decompress-zip
Affected Versions
>= 0.3.0, < 0.3.2
Patched Versions
0.3.2
0/10
Summary
Arbitrary File Overwrite in decompress-zip
Affected Versions
< 0.2.2
Patched Versions
0.2.2
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
Reason
Found 4/24 approved changesets -- score normalized to 1
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
Reason
project is not fuzzed
Details
Reason
branch protection not enabled on development/release branches
Details
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
Score
Last Scanned on 2025-05-05
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More