This release adds 3 notable features for engineering teams evaluating rollout.
Published 29d
Vulnerability Scanning
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
antivirus
clamav
clamscan
docker
express
file-scanner
+8 more
malware
nodejs
npm
security
typescript
upload-file
virus
virus-scan
Summary
AI summaryAdded NestJS module, Fastify plugin, and framework integration docs.
Full changelog
Added
- @pompelmi/nestjs — NestJS module with
PompelmiModule.forRoot()/.forRootAsync(), injectablePompelmiService(scan / scanBuffer / isMalware),PompelmiGuard(blocks malicious uploads viaCanActivate), andPompelmiInterceptor(throwsBadRequestExceptionon infection). Full TypeScript declarations included. - @pompelmi/fastify — Fastify plugin that decorates the instance with
fastify.pompelmi(scan / scanBuffer / scanStream / preHandler). ThepreHandler()helper returns a route-level hook that scans uploaded files before the route handler runs. Supports customonMaliciouscallbacks and full TypeScript declarations. - Framework Integrations section in
README.md— table of official packages with usage snippets for NestJS and Fastify.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Pompelmi
Open-source file upload security for Node.js. Scan files before storage to detect malware, MIME spoofing, and risky archives.
Related context
Related tools
Beta — feedback welcome: [email protected]