pompelmi

Minimal Node.js wrapper around ClamAV — scan any file and get Clean, Malicious, or ScanError. Handles installation and database updates automatically.

[pompelmi @pompelmi_oss]

File upload security in Node.js shouldn't require a PhD in system administration.

Pompelmi is a dead-simple wrapper for ClamAV. Give it a file path, it returns "Clean", "Malicious", or "ScanError".

Stop wrestling with configs. Start scanning.

https://t.co/kAPvjRBhIU

[pompelmi @pompelmi_oss]

Wrapping ClamAV in Node.js is a rite of passage everyone regrets: spawn, parse stdout with regex, hope exit codes don't change, reinvent the cross-platform install.
pompelmi does it once so you don't have to. Typed Verdict, zero runtime deps, no daemons.
https://t.co/oaJb95fIgX

[pompelmi @pompelmi_oss]

my open source project just hit 600 stars

[pompelmi @pompelmi_oss]

Pompelmi is open source and focused on providing a transparent, local-first security solution for developers handling user-generated content. Source code and documentation are available on GitHub:
https://t.co/kAPvjRBhIU

[pompelmi @pompelmi_oss]

Standard file upload implementation in Node.js often overlooks critical security vectors. Relying on client-side validation or basic extension checks leaves your server exposed to MIME spoofing and resource exhaustion attacks.

[pompelmi @pompelmi_oss]

The API is designed for minimal boilerplate. It can be integrated into existing Express, Fastify, or vanilla Node.js workflows. You pass the file buffer, define your security constraints, and receive a validation result.

[Stack Overflow @StackOverflow]

Thanks to AI, bad code is easier to write than ever, making application security increasingly more important—even in your file uploads. In this Q&A, Ryan Donovan chats with @SonoTommy_, creator of the open source pompelmi project, about creating easy and flexible ways to defend against file upload attacks, and how devs can create a strong baseline against attacks to keep their codebases safe.

https://t.co/f3QQDALjLW