Gathering detailed insights and metrics for then-busboy
Gathering detailed insights and metrics for then-busboy
Installations
npm install then-busboyDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS, ESM
Min. Node Version
>= 12.4
Node Version
18.7.0
NPM Version
8.15.0
Score
70.6
Supply Chain
97.6
Quality
75.4
Maintenance
50
Vulnerability
99.6
License
Releases
18
Contributors
4
Unable to fetch Contributors
Languages
2
TypeScript
JavaScript
TypeScript (99.57%)
JavaScript (0.43%)
validate.email 🚀
Verify real, reachable, and deliverable emails with instant MX records, SMTP checks, and disposable email detection.
Developer
Download Statistics
Total Downloads
64,715
Last Day
6
Last Week
52
Last Month
221
Last Year
5,429
GitHub Statistics
MIT License
9 Stars
529 Commits
3 Forks
1 Watchers
3 Branches
4 Contributors
Updated on Oct 25, 2023
Bundle Size
53.46 kB
Minified
14.49 kB
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
5.2.1
Package Id
then-busboy@5.2.1
Unpacked Size
76.27 kB
Size
16.42 kB
File Count
80
NPM Version
8.15.0
Node Version
18.7.0
Total Downloads
Cumulative downloads
Total Downloads
64,715
Last Day
-50%
6
Compared to previous day
Last Week
18.2%
52
Compared to previous week
Last Month
-44.9%
221
Compared to previous month
Last Year
1%
5,429
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
29
@octetstream/eslint-config@types/http-errors@types/lodash.merge@types/node@types/supertest@typescript-eslint/eslint-plugin@typescript-eslint/parser@zoltu/typescript-transformer-append-js-extensionavac8eslinteslint-config-airbnb-typescripteslint-plugin-avaeslint-plugin-jsx-a11yeslint-plugin-reactform-data-encoderhuskylint-stagedlowercase-keyspinstpromise-fsproxyquirerimrafsinonsupertestts-nodettypescripttyped-emittertypescript
then-busboy
Promise-based wrapper around Busboy. Processes multipart/form-data request body and returns it in a single object.
Installation
You can install then-busboy from npm:
npm install --save then-busboy
Or with yarn:
yarn add then-busboy
Usage
Because then-busboy can process multipart/form-data bodies from AsyncIterable sources, you can use it with different HTTP frameworks, or with Node.js http module, or even with Response object (see the 4th example).
- Let's take a look at the example with
httpmodule from Node.js. We'll write a simple server that will parse form-data request, read files content and then send them back as JSON:
1import {createServer} from "http" 2import {parse} from "then-busboy" 3 4const handler = (req, res) => parse(req) 5 .then(async body => { 6 const result = [] 7 for (const [path, value] of body) { 8 result.push([path, isFile(value) ? await value.text() : value]) 9 } 10 11 res.setHeader("Content-Type", "application/json") 12 res.end(JSON.stringify(Body.json(result))) 13 }) 14 .catch(error => { 15 res.statusCode = error.status || 500 16 res.end(error.message) 17 }) 18 19createServer(handler) 20 .listen(2319, () => console.log("Server started on http://localhost:2319"))
Note: You can use asynchronous function syntax, because then-busboy always returns a Promise.
- Miniaml multipart middleware implementation for Koa.js:
1import {parse} from "then-busboy" 2 3async function multipart(ctx, next) { 4 if (["post", "put"].includes(ctx.method.toLowerCase()) === false) { 5 return next() 6 } 7 8 if (ctx.is("multipart/form-data") === false) { 9 return next() 10 } 11 12 const body = await parse(ctx.req) 13 14 ctx.request.body = body.json() 15 16 return next() 17} 18 19export default multipart
- You can also use
AsyncIterablevalue as the input. That way you can parse FormData from other that just HTTP requests. Let's take a loook at the example withform-data-encoderandformdata-nodeas the input:
1import {fileFromPath} from "formdata-node/file-from-path" 2import {FormDataEncoder} from "form-data-encoder" 3import {FormData} from "formdata-node" 4import {parse} from "then-busboy" 5 6const form = new FormData() 7 8form.set("greeting", "Hello, World!") 9form.set("file", new File(["On Soviet Moon landscape see binoculars through YOU"], "file.txt")) 10form.set("fileFromPath", await fileFromPath("path/to/a/file")) 11 12const encoder = new FormDataEncoder(form) 13 14const body = await parse(encoder, { 15 headers: { 16 "content-type": encoder.contentType 17 } 18}) 19 20console.log(body.json()) // -> {greeting: string, file: BodyFile, fileFromPath: BodyFile}
- Because
then-busboyaccepts AsyncIterable as the input, you can also readResponsebody like that:
1import {Response, FormData} from "node-fetch" 2import {parse} from "then-bosboy" 3const form = new FormData() 4 5form.set("greeting", "Hello, World!") 6form.set("file", new File(["On Soviet Moon landscape see binoculars through YOU"], "file.txt")) 7 8const response = new Respone(form) 9// then-busboy will parse the input and return its own Body instance from which you can create a complete object by calling .json() method or a FormData using .formData() method. 10// The difference with Response.formData() is that then-busboy will save all files to file system and create a *reference* to each of them, 11// while Response (currently) will dump them into RAM, which can be less efficient in some scenarious 12const body = await parse(response.body, { 13 headers: { 14 "content-type": response.headers.get("content-type") 15 } 16}) 17 18body.json() // -> {greeting: string, file: BodyFile} 19body.formData() // -> FormData
API
parse(source[, options]) -> {Promise<Body>}
- {AsyncIterable} source – Incoming HTTP multipart/form-data source.
- {object} [options = {}]
- {boolean} castTypes – allow to restore type of each value (default – true)
- more information about busboy options here.
class Body
constructor(entries) -> {Body}
Create an object that allows to manipulate FormData fields taken then-busboy
Static methods
from(entries) -> {Body}
Create a new Body from given entries. An alias of new Body(entries)
- {Array<[string[], any]>} entries – an array of Body initial path-value pairs taken from
then-busboy
json(value) -> {object}
Return an object with data taken from given entries or Body
- {Body | Array<[string[], any]>} – return an object from given Body or entries
formData(value) -> {FormData}
Return a FormData instance with data taken from given entries or Body
- {Body | Array<[string[], any]>} – return an FormData from given Body or entries
Instance properties
length -> {number}
Return an amount of entries and files in current Body instance
Instance methods
fields() -> {Body}
Return a new Body that contains fields only
files() -> {Body}
Return a new Body that contains files only
json() -> {object}
Return an object with data taken the current Body instance
formData() -> {FormData}
Return a FormData with data taken the current Body instance
entries() -> {Array<[string[], any]>}
Return an array of entries in current Body instance
values() -> {Iterator}
Return an iterator allows to go through the Body values
keys() -> {Iterator}
Return an iterator allows to go through the Body fields path
interface BodyFile
This interface reflects internal representation of a File. It is not meant to be constructed manually, but since it's compatible with files from the browsers, you can use these in Body if you need to.
Instance properties
name
Contains original name of file taken from the filename property within the form-data.
type
File MIME type
enc
Contains a value from transfer encoding header
path
Path to the file on disk
Instance methods
stream() -> {Readable}
Returns a Readable stream allowing to consume file's content
class BodyField
BodyField class in the internal representation of a regular FormData value.
constructor(value: unknown, name: string[, options]) -> {BodyField}
Creates a new instance of the BodyField class.
Instance properties
name
Returns the name of the field.
fieldnameTruncated
Indicates whether the fieldname was truncated.
valueTruncated
Indicates whether the value was truncated.
enc
Returns a value from Content-Transfer-Encoding header.
type
Returns a value from Content-Type header.
Instance methods
valueOf() -> {unknown}
Returns the value of the BodyField.
toString() -> {string}
Returns string representation of the BodyField value.
Fields format
then-busboy can restore an object structure from form-data field names if you will follow the naming formats with dots or square brackets:
Dot notation
This notation looks similarly to JS object properties accessiong syntax:
# Flat objects looks the same in both notations
# Note that the following notation examples is just a pseudo code
name = "John Doe"
age = 25
then-busboy will return the this object for an example from above:
1{ 2 name: "John Doe", 3 4 // By default, non-string values will be converted to their initial type. 5 // So, "25" -> 25, "null" -> null, "false" -> false etc. 6 age: 25 7}
For deep objects or collections, use dot or brackets as a separator. But don't mix them.
rootField.nestedField = "Some text here"
1 { 2 rootField: { 3 nestedField: "Some text here" 4 } 5 }
Bracket notation
rootField[nestedField] = "I beat Twilight Sparkle and all I got was this lousy t-shirt"
Becomes
1{ 2 rootField: { 3 nestedField: "I beat Twilight Sparkle and all I got was this lousy t-shirt" 4 } 5}
You can also send an arrays and collections using bracket format:
message[sender] = "John Doe"
message[text] = "Some whatever text message."
message[attachments][0][file] = <here is the file content>
message[attachments][0][description] = "Here is a description of the file"
then-busboy returns the following object:
1{ 2 message: { 3 sender: "John Doe", 4 text: "Some whatever text message.", 5 attachments: [ 6 { 7 "file": File, // this field will be represended as a File instance 8 "description": "Here is a description of the file" 9 } 10 ] 11 } 12}
Collections allowed too:
[0][firstName] = "John"
[0][lastName] = "Doe"
[0][dob][day] = "1"
[0][dob][month] = "Jan."
[0][dob][year] = "1989"
[0][skills][0] = "Node.js"
[0][skills][1] = "CoffeeScript"
[0][skills][2] = "JavaScript"
[0][skills][3] = "Babel"
[1][firstName] = "Max"
[1][lastName] = "Doe"
[1][dob][day] = "12"
[1][dob][month] = "Mar."
[1][dob][year] = "1992"
[1][skills][0] = "Python"
[1][skills][1] = "Flask"
[1][skills][2] = "JavaScript"
[1][skills][3] = "Babel"
[1][skills][4] = "React"
[1][skills][5] = "Redux"
Then you will receive:
1[ 2 { 3 firstName: "John", 4 lastName: "Doe", 5 dob: { 6 day: 1, 7 month: "Jan.", 8 year: 1989 9 }, 10 skills: ["Node.js", "CoffeeScript", "JavaScript", "Babel"] 11 }, { 12 firstName: "Max", 13 lastName: "Doe", 14 dob: { 15 day: 12, 16 month: "Mar.", 17 year: 1992 18 }, 19 skills: ["Python", "Flask", "JavaScript", "Babel", "React", "Redux"] 20 } 21]
Limits
Whenlimits options are set, then-busboy may reject with HTTP 413 error if specified limit(s) exceeded. That will be a regular error from object http-errors package.
Related links
- formdata-node spec-compliant FormData implementation for Node.js
- @octetstream/object-to-form-data converts JavaScript object to FormData.
License
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: license:0
- Info: FSF or OSI recognized license: MIT License: license:0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
Found 2/28 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/eslint.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/octet-stream/then-busboy/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/octet-stream/then-busboy/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/octet-stream/then-busboy/ci.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/octet-stream/then-busboy/ci.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/octet-stream/then-busboy/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/eslint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/octet-stream/then-busboy/eslint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/eslint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/octet-stream/then-busboy/eslint.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/eslint.yml:27
- Info: 0 out of 5 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 4 are checked with a SAST tool
Reason
14 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-h452-7996-h45h
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Score
2.8
/10
Last Scanned on 2025-03-03
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More