extension-from-store 0.2.4 → 0.2.5

package/dist/extract.d.ts

@@ -1,3 +1,3 @@
 export { stripCrxHeader } from './crx';
-export declare function extractCrx(crxPath: string, extractDir: string, workDir: string): Promise<void>;
+export declare function extractCrx(crxPath: string, extractDir: string, _workDir?: string): Promise<void>;
 export declare function extractZipArchive(zipPath: string, extractDir: string): Promise<void>;

package/dist/index.cjs

@@ -63,8 +63,7 @@ class errors_extensionFromStoreError extends Error {
         this.cause = cause;
     }
 }
-const external_extract_zip_namespaceObject = require("extract-zip");
-var external_extract_zip_default = /*#__PURE__*/ __webpack_require__.n(external_extract_zip_namespaceObject);
+const external_fflate_namespaceObject = require("fflate");
 function readUInt32LE(bytes, offset) {
     const view = new DataView(bytes.buffer, bytes.byteOffset + offset, Uint32Array.BYTES_PER_ELEMENT);
     return view.getUint32(0, true);
@@ -106,21 +105,38 @@ async function normalizeExtractedModes(dir) {
         }
     }
 }
-async function extractCrx(crxPath, extractDir, workDir) {
+async function writeZipEntries(zipData, extractDir) {
+    const root = external_node_path_default().resolve(extractDir);
+    const entries = (0, external_fflate_namespaceObject.unzipSync)(zipData);
+    await promises_default().mkdir(root, {
+        recursive: true
+    });
+    for (const [name, data] of Object.entries(entries)){
+        const normalized = name.replace(/\\/g, '/');
+        const target = external_node_path_default().resolve(root, normalized);
+        const relative = external_node_path_default().relative(root, target);
+        if (!relative || relative.startsWith('..') || external_node_path_default().isAbsolute(relative)) throw new Error(`Refusing to extract zip entry outside the extraction dir: ${name}`);
+        if (normalized.endsWith('/')) {
+            await promises_default().mkdir(target, {
+                recursive: true
+            });
+            continue;
+        }
+        await promises_default().mkdir(external_node_path_default().dirname(target), {
+            recursive: true
+        });
+        await promises_default().writeFile(target, data);
+    }
+}
+async function extractCrx(crxPath, extractDir, _workDir) {
     const crxBuffer = await promises_default().readFile(crxPath);
     const zipBuffer = Buffer.from(stripCrxHeader(crxBuffer));
-    const zipPath = external_node_path_default().join(workDir, 'payload.zip');
-    await promises_default().writeFile(zipPath, zipBuffer);
-    await external_extract_zip_default()(zipPath, {
-        dir: extractDir
-    });
+    await writeZipEntries(new Uint8Array(zipBuffer), extractDir);
     await normalizeExtractedModes(extractDir);
-    await promises_default().unlink(zipPath).catch(()=>void 0);
 }
 async function extractZipArchive(zipPath, extractDir) {
-    await external_extract_zip_default()(zipPath, {
-        dir: extractDir
-    });
+    const zipBuffer = await promises_default().readFile(zipPath);
+    await writeZipEntries(new Uint8Array(zipBuffer), extractDir);
     await normalizeExtractedModes(extractDir);
 }
 const external_node_fs_namespaceObject = require("node:fs");

package/dist/index.js

@@ -1,7 +1,7 @@
 import promises from "node:fs/promises";
 import node_os from "node:os";
 import node_path from "node:path";
-import extract_zip from "extract-zip";
+import { unzipSync } from "fflate";
 import node_fs from "node:fs";
 import node_http from "node:http";
 import node_https from "node:https";
@@ -22,21 +22,38 @@ async function normalizeExtractedModes(dir) {
         }
     }
 }
-async function extractCrx(crxPath, extractDir, workDir) {
+async function writeZipEntries(zipData, extractDir) {
+    const root = node_path.resolve(extractDir);
+    const entries = unzipSync(zipData);
+    await promises.mkdir(root, {
+        recursive: true
+    });
+    for (const [name, data] of Object.entries(entries)){
+        const normalized = name.replace(/\\/g, '/');
+        const target = node_path.resolve(root, normalized);
+        const relative = node_path.relative(root, target);
+        if (!relative || relative.startsWith('..') || node_path.isAbsolute(relative)) throw new Error(`Refusing to extract zip entry outside the extraction dir: ${name}`);
+        if (normalized.endsWith('/')) {
+            await promises.mkdir(target, {
+                recursive: true
+            });
+            continue;
+        }
+        await promises.mkdir(node_path.dirname(target), {
+            recursive: true
+        });
+        await promises.writeFile(target, data);
+    }
+}
+async function extractCrx(crxPath, extractDir, _workDir) {
     const crxBuffer = await promises.readFile(crxPath);
     const zipBuffer = Buffer.from(stripCrxHeader(crxBuffer));
-    const zipPath = node_path.join(workDir, 'payload.zip');
-    await promises.writeFile(zipPath, zipBuffer);
-    await extract_zip(zipPath, {
-        dir: extractDir
-    });
+    await writeZipEntries(new Uint8Array(zipBuffer), extractDir);
     await normalizeExtractedModes(extractDir);
-    await promises.unlink(zipPath).catch(()=>void 0);
 }
 async function extractZipArchive(zipPath, extractDir) {
-    await extract_zip(zipPath, {
-        dir: extractDir
-    });
+    const zipBuffer = await promises.readFile(zipPath);
+    await writeZipEntries(new Uint8Array(zipBuffer), extractDir);
     await normalizeExtractedModes(extractDir);
 }
 const DEFAULT_USER_AGENT = 'extension-from-store';

package/package.json

@@ -9,7 +9,7 @@
   },
   "engineStrict": false,
   "name": "extension-from-store",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Download public browser extensions from official stores",
   "homepage": "https://www.npmjs.com/package/extension-from-store",
   "type": "module",
@@ -79,7 +79,6 @@
     "extension-download"
   ],
   "dependencies": {
-    "extract-zip": "^2.0.1",
     "fflate": "^0.8.3"
   },
   "pnpm": {