
Security News
Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.
@taoya7/apk-parse
Advanced tools
一个用于解析 Android APK 文件的 TypeScript 库。
npm install @taoya7/apk-parse
import { parseApk } from '@taoya7/apk-parse'
// 从文件路径解析
const info = await parseApk('/path/to/app.apk')
console.log(info.packageName) // com.example.app
console.log(info.versionName) // 1.0.0
console.log(info.applicationLabel) // 我的应用
console.log(info.icon) // data:image/png;base64,...
import { parseApk } from '@taoya7/apk-parse'
import * as fs from 'fs/promises'
const buffer = await fs.readFile('/path/to/app.apk')
const info = await parseApk(buffer)
import { createApkParser } from '@taoya7/apk-parse'
const { info, parser } = await createApkParser('/path/to/app.apk')
// 获取 APK 中的文件列表
const files = await parser.getFileList()
// 读取 APK 中的文件
const fileContent = await parser.readFile('assets/config.json')
// 单独获取图标
const iconBuffer = await parser.getIcon()
const iconBase64 = await parser.getIconBase64()
interface ApkInfo {
packageName: string // 包名 (例如: com.example.app)
versionCode: number // 版本号 (整数)
versionName: string // 版本名称 (例如: "1.0.0")
applicationLabel: string // 应用名称
minSdkVersion: number // 最低 SDK 版本
targetSdkVersion: number // 目标 SDK 版本
compileSdkVersion?: number // 编译 SDK 版本 (可选)
permissions: string[] // 权限列表
icon?: string // 应用图标 base64 (data URI 格式)
}
Package Name: com.github.metacubex.clash.meta
Version Code: 211016
Version Name: 2.11.16.Meta
Application: Clash Meta for Android
Min SDK: 21
Target SDK: 35
Compile SDK: 35
Permissions: 9
Icon: data:image/png;base64,iVBORw0KGgo...
<img :src="info.icon" alt="App Icon" />
快速解析 APK 文件。
input: 文件路径 (string) 或 Bufferoptions: 可选配置Promise<ApkInfo>创建解析器实例,可进行更多操作。
input: 文件路径 (string) 或 Bufferoptions: 可选配置Promise<{ info: ApkInfo, parser: ApkParser }>parseFromFile(filePath): 从文件解析parseFromBuffer(buffer): 从 Buffer 解析getIcon(): 获取图标 BuffergetIconBase64(): 获取图标 base64 字符串getFileList(): 获取文件列表readFile(path): 读取指定文件# 安装依赖
npm install
# 运行测试
npm run test
# 构建
npm run build
jszip 解压 APK 文件MIT
FAQs
A TypeScript library for parsing Android APK files
We found that @taoya7/apk-parse demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.