
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
download-md5
Advanced tools
Download file utility, supports checking MD5 and finalize only when complete
download-md5 is a simple utility to download files via HTTP, and optionally check their MD5 as it goes.
It will download to a temporary file "next to" the final file, with an extension of .download. Once the file is completely downloaded, with no errors, then it will move the temporary file into place.
You can also call download-md5 from the command line, by installing it globally.
var download = require('download-md5')
var url = 'https://pbs.twimg.com/profile_images/616542814319415296/McCTpH_E.jpg'
download(url, 'results/grumpy_cat.jpg', { md5: 'dc3637149942510755db677cb1d1574e' }, function(err) {
if (err)
console.log(err)
else
console.log("Done")
})
Installation via npm:
npm install download-md5 -g
download-md5 <from_url> <to_file> [md5]
from_url is the URL to download from. It may be http or https, and may contain basic auth.
to_file is the output filename. The directory will be created using mkdirp if it does not exist.
opts is optional, and can have:
md5 - check the MD5 against a known MD5, and only consider the download successful if it matchesfinalize - defaults to true. If set to false, then the output file will remain with the .download suffix.
Call download.finalizeDownload(to_file, cb) to finish the job.request, e.g. timeoutISC
FAQs
Download file utility, supports checking MD5 and finalize only when complete
We found that download-md5 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.