
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
@ffflorian/jszip-cli
Advanced tools
A zip CLI based on jszip.
Run yarn global add @ffflorian/jszip-cli or npm i -g @ffflorian/jszip-cli.
Or simply run npx @ffflorian/jszip-cli.
Usage: jszip-cli [options] [command]
A zip CLI based on jszip.
Options:
--noconfig don't look for a configuration file
-c, --config <path> use a configuration file (default: .jsziprc.json)
-o, --output <dir> set the output directory (default: stdout)
-i, --ignore <entry> ignore a file or directory
-f, --force force overwriting files and directories when extracting (default: false)
-d, --dereference dereference (follow) links (default: false)
-l, --level <number> set the compression level (default: 5)
-V, --verbose enable verbose logging (default: false)
-q, --quiet don't log anything (default: false)
-v, --version output the version number
-h, --help output usage information
Commands:
add|a [options] [entries...] add files and directories to a new ZIP archive
extract|e [options] <archives...> extract files and directories from ZIP archive(s)
To use a configuration file, add a configuration file following the cosmiconfig standard (e.g. .jsziprc.json) to your project and the JSZip CLI will find it automatically. Options from the CLI still take precedence over the configuration file.
The structure of the configuration file is the following:
{
/** The compression level to use (0 = save only, 9 = best compression) (default: 5). */
compressionLevel?: number;
/** Use a configuration file (default: .jsziprc.json). */
configFile?: string | boolean;
/** Whether to dereference (follow) symlinks (default: false). */
dereferenceLinks?: boolean;
/** Which files or directories to add. */
entries: string[];
/** Force overwriting files and directories when extracting (default: false). */
force?: boolean;
/** Ignore entries (e.g. `*.js.map`). */
ignoreEntries?: Array<string | RegExp>;
/** Add or extract files. */
mode: 'add' | 'extract';
/** Set the output directory (default: stdout). */
outputEntry?: string | null;
/** Don't log anything excluding errors (default: false). */
quiet?: boolean;
/** Enable verbose logging (default: false). */
verbose?: boolean;
}
If you would like to use a custom configuration file, start the CLI with the option --config <file>.
jszip-cli add --ignore *.map --output deploy.zip dist/ package.json
jszip-cli add --ignore *.map dist/ package.json > deploy.zip
jszip-cli extract --output deployment_files/ deploy.zip
FAQs
A zip CLI based on jszip.
The npm package @ffflorian/jszip-cli receives a total of 668 weekly downloads. As such, @ffflorian/jszip-cli popularity was classified as not popular.
We found that @ffflorian/jszip-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.