Gathering detailed insights and metrics for yauzl-clone
Gathering detailed insights and metrics for yauzl-clone
Gathering detailed insights and metrics for yauzl-clone
Gathering detailed insights and metrics for yauzl-clone
npm install yauzl-clone
Module System
Min. Node Version
Typescript Support
Node Version
NPM Version
1 Stars
37 Commits
3 Watching
6 Branches
1 Contributors
Updated on 29 Apr 2023
JavaScript (100%)
Cumulative downloads
Total Downloads
Last day
3.3%
108,075
Compared to previous day
Last week
3.1%
556,808
Compared to previous week
Last month
8.6%
2,380,710
Compared to previous month
Last year
554.5%
22,091,648
Compared to previous year
yauzl
for patchingThis module contains tools to help with creating modules that modify yauzl unzipping library in some way.
yauzl-promise and yauzl-crc, for example, use this module internally.
When monkey-patching a module, it is good practice to clone the original module first so as not to alter the result of calling require('yauzl')
somewhere else in your application (perhaps inside a dependency).
This module provides some helper methods for creating cloned versions of yauzl for later modification.
.clone( yauzl [, options ] )
Options are as follows (defaults shown):
1{ 2 clone: true, 3 subclassZipFile: false, 4 subclassEntry: false, 5 eventsIntercept: false 6}
clone
Clones the yauzl object. Equivalent to Object.assign({}, yauzl)
.
1const yauzl = require('yauzl'); 2const yauzlClone = require('yauzlClone'); 3 4const clone = yauzlClone(yauzl);
subclassZipFile
Creates a subclass of yauzl.ZipFile
. The prototype of yauzl.ZipFile
can then be altered without affecting the original.
This option also monkey-patches the access methods (.open()
, .fromFd()
, .fromBuffer()
, .testFromRandomAccessReader()
) to callback with instances of this ZipFile
subclass.
subclassEntry
Creates a subclass of yauzl.Entry
(same idea as subclassZipFile
).
This option also monkey-patches the access methods in order to intercept emitted 'entry' events and modify the emitted values to instances of the Entry
subclass. events-intercept module is used internally for event interception.
eventsIntercept
Adds events-intercept methods to ZipFile
prototype. This option is automatically set to true
if subclassEntry
option is true
.
.patch( yauzl, methodName, wrapper )
Patches an access method. wrapper
is called with the original method original
and should return the replacement method. This API is identical to shimmer.
1const yauzl = require('yauzl'); 2const yauzlClone = require('yauzlClone'); 3 4yauzlClone.patch( yauzl, 'fromRandomAccessReader', function(original) { 5 return function(reader, totalSize, options, callback) { 6 original(reader, totalSize, options, function(err, zipFile) { 7 if (err) return callback(err); 8 // Do something to zipFile 9 callback(null, zipFile); 10 }); 11 }; 12});
This method also does a couple of other useful things:
i.e. if no options are provided in the original call, an empty options
object is created. There is no need to check for whether the 2nd or 3rd argument is the callback.
.open()
, .fromFd()
and .fromBuffer()
take 3 arguments, .fromRandomAccessReader()
takes 4.
To allow patching all methods simply using the same wrapper function, the patched method will be called for .open()
, .fromFd()
and .fromBuffer()
with an extra empty argument. original
should also be called with an extra argument.
1yauzlClone.patch( yauzl, 'open', function(original) { 2 return function(path, _unused, options, callback) { 3 // NB Notice `_unused` argument above 4 original(reader, null, options, function(err, zipFile) { 5 if (err) return callback(err); 6 // Do something to zipFile 7 callback(null, zipFile); 8 }); 9 }; 10});
.patchAll( yauzl, wrapper )
Convenience method to patch all 4 access methods at once.
1yauzlClone.patchAll( yauzl, wrapper ); 2 3// ...is equivalent to: 4yauzlClone.patch( yauzl, 'open', wrapper ); 5yauzlClone.patch( yauzl, 'fromFd', wrapper ); 6yauzlClone.patch( yauzl, 'fromBuffer', wrapper ); 7yauzlClone.patch( yauzl, 'fromRandomAccessReader', wrapper );
This module follows semver. Breaking changes will only be made in major version updates.
All active NodeJS release lines are supported (v16+ at time of writing). After a release line of NodeJS reaches end of life according to Node's LTS schedule, support for that version of Node may be dropped at any time, and this will not be considered a breaking change. Dropping support for a Node version will be made in a minor version update (e.g. 1.2.0 to 1.3.0). If you are using a Node version which is approaching end of life, pin your dependency of this module to patch updates only using tilde (~
) e.g. ~1.2.3
to avoid breakages.
Use npm test
to run the tests. Use npm run cover
to check coverage.
See changelog.md
If you discover a bug, please raise an issue on Github. https://github.com/overlookmotel/yauzl-clone/issues
Pull requests are very welcome. Please:
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
Reason
dependency not pinned by hash detected -- score normalized to 5
Details
Reason
6 existing vulnerabilities detected
Details
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
no SAST tool detected
Details
Reason
security policy file not detected
Details
Reason
project is not fuzzed
Details
Reason
branch protection not enabled on development/release branches
Details
Score
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More