This release adds 3 notable features for engineering teams evaluating rollout.
Published 28d
Vulnerability Scanning
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
antivirus
clamav
clamscan
docker
express
file-scanner
+8 more
malware
nodejs
npm
security
typescript
upload-file
virus
virus-scan
Summary
AI summaryAdded HTML security dashboard, SVG share card, CLI reporting flags, Next.js integration package, GitHub App configuration, and updated documentation.
Full changelog
Added
- HTML security dashboard —
generateDashboard(scanResults, options)generates a self-contained HTML report with summary stats, colour-coded status banner, file table with verdict badges, infected files section, scan metadata, dark mode viaprefers-color-scheme, and print-friendly CSS. No external dependencies. - SVG share card —
generateShareCard(scanResults, options)generates a 560 × 200 px SVG card showing the scan summary. Suitable for embedding in READMEs or sharing on social media. Green theme for clean scans, red for infected. - CLI
--reportflag —pompelmi scan ./uploads --reportsavespompelmi-report.htmlafter scanning. Use--output <path>to customise the filename. - CLI
--share-cardflag —pompelmi scan ./uploads --share-cardsavespompelmi-scan-card.svgafter scanning. Use--output <path>to customise the filename. @pompelmi/nextjs— new package providingwithPompelmi(handler, options)(App Router / Next.js 13+) andwithPompelmiHandler(handler, options)(Pages Router). Scans the raw request body before the handler runs; returns HTTP 400 on malicious files. Full TypeScript declarations included.- GitHub App configuration —
.github/app.ymldescribes the pompelmi GitHub App that organizations can install for zero-config virus scanning on every pull request. Posts native check runs with pass/fail status and inline diff annotations for infected files. docs/dashboard.html— new documentation page coveringgenerateDashboard,generateShareCard, CLI flags, options reference, and usage examples.docs/github-app.html— new documentation page explaining the GitHub App, the Action vs App comparison table, installation steps, permissions, check run flow, and self-hosting instructions.- Navbar updated across all
docs/HTML pages to include Dashboard and GitHub App links. docs/cli.htmlupdated — added--report,--share-card, and--outputto the options table and added dedicated#reportand#share-cardsections.- README.md updated — added HTML dashboard, SVG share card, and GitHub App to the Features list; added GitHub App callout under the GitHub Action section.
Changed
src/index.js— exportsgenerateDashboardandgenerateShareCardalongside existing API.types/index.d.ts— full TypeScript declarations forgenerateDashboard,DashboardOptions,generateShareCard,ShareCardOptions, andScanRow.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Pompelmi
Open-source file upload security for Node.js. Scan files before storage to detect malware, MIME spoofing, and risky archives.
Related context
Related tools
Beta — feedback welcome: [email protected]