ZIP deep-inspection
Bomb/ratio limits, traversal-safe extraction, inner MIME sniff.
PompelmiFast file-upload malware scanning for Node.js
Optional YARA, ZIP deep-inspection, MIME/size guards. Express · Koa · Next.js.
Skip to content
Policy guard
Enforce extension allowlist, size caps, and server-side MIME checks.
Framework adapters
Express, Koa, Fastify, Next.js — TypeScript first.