exarch-rs 0.2.3 → 0.2.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -10
- package/native/exarch-rs.darwin-arm64.node +0 -0
- package/native/exarch-rs.darwin-x64.node +0 -0
- package/native/exarch-rs.linux-arm64-gnu.node +0 -0
- package/native/exarch-rs.linux-x64-gnu.node +0 -0
- package/native/exarch-rs.win32-x64-msvc.node +0 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -8,8 +8,7 @@
|
|
|
8
8
|
|
|
9
9
|
Memory-safe archive extraction and creation library for Node.js.
|
|
10
10
|
|
|
11
|
-
>
|
|
12
|
-
> **exarch** is designed as a secure replacement for vulnerable archive libraries like `tar-fs`, which has known CVEs with CVSS scores up to 9.4.
|
|
11
|
+
> **Important:** exarch is designed as a secure replacement for vulnerable archive libraries like `tar-fs`, which has known CVEs with CVSS scores up to 9.4.
|
|
13
12
|
|
|
14
13
|
This package provides Node.js bindings for [exarch-core](../exarch-core), a Rust library with built-in protection against common archive vulnerabilities.
|
|
15
14
|
|
|
@@ -29,8 +28,7 @@ pnpm add exarch-rs
|
|
|
29
28
|
bun add exarch-rs
|
|
30
29
|
```
|
|
31
30
|
|
|
32
|
-
>
|
|
33
|
-
> This package includes TypeScript definitions. No need for separate `@types` package.
|
|
31
|
+
> **Note:** This package includes TypeScript definitions. No need for separate `@types` package.
|
|
34
32
|
|
|
35
33
|
## Requirements
|
|
36
34
|
|
|
@@ -81,8 +79,7 @@ const result = extractArchiveSync('archive.tar.gz', '/output/path');
|
|
|
81
79
|
console.log(`Extracted ${result.filesExtracted} files`);
|
|
82
80
|
```
|
|
83
81
|
|
|
84
|
-
>
|
|
85
|
-
> Prefer the async API to avoid blocking the event loop during extraction.
|
|
82
|
+
> **Tip:** Prefer the async API to avoid blocking the event loop during extraction.
|
|
86
83
|
|
|
87
84
|
### ES Modules
|
|
88
85
|
|
|
@@ -185,8 +182,7 @@ The library provides built-in protection against:
|
|
|
185
182
|
| Permission sanitization | Strips setuid/setgid bits |
|
|
186
183
|
| Size limits | Enforces file and total size limits |
|
|
187
184
|
|
|
188
|
-
>
|
|
189
|
-
> Unlike many Node.js archive libraries, exarch applies security validation by default.
|
|
185
|
+
> **Caution:** Unlike many Node.js archive libraries, exarch applies security validation by default.
|
|
190
186
|
|
|
191
187
|
## Supported Formats
|
|
192
188
|
|
|
@@ -200,8 +196,7 @@ The library provides built-in protection against:
|
|
|
200
196
|
| ZIP | `.zip` | ✅ | ✅ |
|
|
201
197
|
| 7z | `.7z` | ✅ | — |
|
|
202
198
|
|
|
203
|
-
>
|
|
204
|
-
> 7z creation is not yet supported. Solid and encrypted 7z archives are rejected for security reasons.
|
|
199
|
+
> **Note:** 7z creation is not yet supported. Solid and encrypted 7z archives are rejected for security reasons.
|
|
205
200
|
|
|
206
201
|
## Comparison with tar-fs
|
|
207
202
|
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|
|
Binary file
|