This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Summary
AI summaryStandalone CLI adds real‑time watching, JSON output, and auto‑delete of infected files.
Full changelog
What's New
Standalone CLI
Scan files directly from the terminal — no code required:
# Scan a file
npx pompelmi scan ./uploads/file.pdf
# Scan a directory recursively
npx pompelmi scan ./uploads --recursive
# Output as JSON for scripting
npx pompelmi scan ./uploads --json
# Watch a folder in real time
npx pompelmi watch ./uploads
Features:
- Renders the pompelmi grapefruit logo in the terminal via
terminal-image - Live progress bar for directory scans
- Box-drawing UI with color-coded results (green/red/yellow)
--jsonmode for shell script integration--deleteflag to auto-remove infected files--quietmode for CI pipelines- Works with TCP, UNIX socket, and local clamscan
Exit codes: 0 clean · 1 infected · 2 scan error · 3 clamd unreachable
Install globally:
npm install -g pompelmi
pompelmi scan ./uploads
Or use without installing:
npx pompelmi scan ./uploads
CLI Documentation
New dedicated page: docs/cli.html
- Full commands and options reference
- JSON output format
- Exit codes table
- 8 real-world examples
- Shell script integration
Navbar updated across all docs
All docs/ pages now have a consistent navbar including the new CLI link.
Changes
bin/pompelmi.js— full CLI implementationpackage.json—binfield added,terminal-imagedependencydocs/cli.html— new CLI documentation pagedocs/*.html— navbar updated across all pagesREADME.md— Quick Start section, CLI in Features and docs tableCHANGELOG.md— v1.12.0 entry
Full Changelog
https://github.com/pompelmi/pompelmi/compare/v1.11.0...v1.12.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Pompelmi
Open-source file upload security for Node.js. Scan files before storage to detect malware, MIME spoofing, and risky archives.
Related context
Related tools
Beta — feedback welcome: [email protected]