pompelmi
In-process file upload security for Node.js
8 followers
In-process file upload security for Node.js
8 followers
Pompelmi protects Node.js upload flows before files touch disk or storage. It runs in-process with no cloud API or daemon, supports Express, Next.js, NestJS, Fastify, Koa, and Nuxt/Nitro, and adds ZIP bomb protection, MIME sniffing, structural heuristics, custom YARA rules, policy packs, quarantine flows, and CLI/CI support.
