
Security News
Federal Government Rescinds Software Supply Chain Mandates, Makes SBOMs Optional
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.
@file-type/cfbf
Advanced tools
Detector plugin for file-type that identifies files based on the Compound File Binary Format, commonly known as CFBF or OLE Compound Document.
CFBF is a container format used by many legacy Microsoft Office files and other Windows applications. This plugin detects the container itself, not the specific document content inside it.
npm install @file-type/cfbf
The following example shows how add the CFBF detector to file-type.
import {FileTypeParser} from 'file-type';
import {detectCfbf} from '@file-type/cfbf';
const parser = new FileTypeParser({customDetectors: [detectCfbf]});
const fileType = await parser.fromFile('smaple.doc');
console.log(fileType);
This detector identifies files that use the Compound File Binary Format Format container:
These are pre-Office Open XML binary Office formats (CFBF/OLE), used by Microsoft Office prior to Office 2007:
.doc Microsoft Word documents (Word 6.0/95, Word 97–2003).pub Microsoft Publisher documents (Publisher 3.0/95-4.0/97, Publisher 5.0/98).ppt Microsoft PowerPoint presentations (PowerPoint 4.0, 7.0/95, 97–2003).vsd Microsoft Visio drawings (2000–2002, 2003–2010).wps Microsoft Works 7–9 Word Processor Document.xls Microsoft Excel spreadsheets (Excel 5.0/95, Excel 97–2003)Other files:
This project is licensed under the MIT License. Feel free to use, modify, and distribute as needed.
FAQs
Compound File Binary Format (CFBF) detection plugin for file-type
We found that @file-type/cfbf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.

Security News
crates.io adds a Security tab backed by RustSec advisories and narrows trusted publishing paths to reduce common CI publishing risks.

Research
/Security News
A Chrome extension claiming to hide Amazon ads was found secretly hijacking affiliate links, replacing creators’ tags with its own without user consent.