
Product
Socket for Jira Is Now Available
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.
bpsA library and CLI tool for creating and applying BPS patches. BPS is short for Binary Patching System. A BPS patch contains the difference between two binary files, the source and the target, and can be used to transform the source file into the target file. For more information, please read the BPS specification.
This module can be treated as an ES module:
import * as bps from 'bps';
// or
import { parse, apply, build, serialize, ActionType } from 'bps';
This module can also be treated as a CommonJS module:
const bps = require('bps');
// or
const { parse, apply, build, serialize, ActionType } = require('bps');
You can parse a BPS binary patch into an instruction set:
const file = await fs.readFile('patch.bps', null);
try
{
const {
instructions,
checksum
} = bps.parse(file);
}
catch (error)
{
// Throws an error when the patch is invalid, e.g. when
// the patch doesn't have a valid BPS header.
}
You can apply an instruction set to a binary source:
const source = await fs.readFile('source.txt', null);
try
{
const target = bps.apply(instructions, source);
}
catch (error)
{
// Throws an error when the provided source does not
// match the checksum stated in the patch instructions.
}
You can build an instruction set from a source and a desired target:
const instructions = bps.build(
await fs.readFile('source.txt', null),
await fs.readFile('target.txt', null)
);
You can serialize an instruction set into a binary BPS buffer:
const {
buffer,
checksum
} = bps.serialize(instructions);
await fs.writeFile('patch.bps', buffer, null);
An instruction set will have the following fields:
| Property | Type | Description |
|---|---|---|
sourceSize | number | The expected size (in bytes) that the source should be. |
sourceChecksum | number | A CRC32 checksum used to verify the source. |
targetSize | number | The expected size (in bytes) that the target should be. |
targetChecksum | number | A CRC32 checksum used to verify the target. |
actions | Object[] | The actions describing how to sequentially create a new target from the source. |
An instruction set compromises of actions, an action results in bytes being appended to the target. Each action has the following properties:
typelengthThe four action types are:
ActionType.SourceReadActionType.TargetReadbytes which will be an array of bytes to write to the target.ActionType.SourceCopyoffset which describes the amount to move the source relative offset by, this can be negative to move backwards.ActionType.TargetCopyoffset which describes the amount to move the target relative offset by, this can be negative to move backwards.This module is available through the Node Package Manager (NPM):
npm install bps
Please Note: Versions of Node lower than v18.0.0 are not supported.
This package also provides a CLI tool to help verify and apply patches. This package will add bps to your path and can be used like so:
Usage: bps [options] [command]
A tool for creating and applying BPS patches.
Options:
-V, --version output the version number
-h, --help display help for command
Commands:
verify <patch> verifies a patch file
apply <patch> <source> <output> applies a patch to a file
create <source> <target> <output> creates a patch from a source and a desired target.
help [command] display help for command
You can build UMD and ESM versions of this package that are minified:
npm run build
This package also has a robust test suite:
npm test
This includes a code quality check using ESLint. Please refer to the .eslintrc files to familiar yourself with the rules.
This project is released under the MIT license.
FAQs
A library and CLI tool for creating and applying BPS patches.
We found that bps demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.

Company News
Socket won two 2026 Reppy Awards from RepVue, ranking in the top 5% of all sales orgs. AE Alexandra Lister shares what it's like to grow a sales career here.

Security News
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.