Socket
Socket
Sign inDemoInstall

jszip

Package Overview
Dependencies
12
Maintainers
3
Versions
38
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install
234Next

3.10.1

Diff

Changelog

Source

v3.10.1 2022-08-02

  • Add sponsorship files.
    • If you appreciate the time spent maintaining JSZip then I would really appreciate your sponsorship.
  • Consolidate metadata types and expose OnUpdateCallback #851 and #852
  • use const instead var in example from README.markdown #828
  • Switch manual download link to HTTPS #839

Internals:

  • Replace jshint with eslint #842
  • Add performance tests #834
stuk
published 2.7.0 •

stuk
published 3.10.0 •

Changelog

Source

v3.10.0 2022-05-20

  • Change setimmediate dependency to more efficient one. Fixes https://github.com/Stuk/jszip/issues/617 (see #829)
  • Update types of currentFile metadata to include null (see #826)
stuk
published 3.9.1 •

Changelog

Source

v3.9.1 2022-04-06

  • Fix recursive definition of InputFileFormat introduced in 3.9.0.
stuk
published 3.9.0 •

Changelog

Source

v3.9.0 2022-04-04

  • Update types JSZip#loadAsync to accept a promise for data, and remove arguments from new JSZip() (see #752)
  • Update types for compressionOptions to JSZipFileOptions and JSZipGeneratorOptions (see #722)
  • Add types for generateInternalStream (see #774)
stuk
published 3.8.0 •

Changelog

Source

v3.8.0 2022-03-30

  • Santize filenames when files are loaded with loadAsync, to avoid "zip slip" attacks. The original filename is available on each zip entry as unsafeOriginalName. See the documentation. Many thanks to McCaulay Hudson for reporting.
stuk
published 3.7.1 •

Changelog

Source

v3.7.1 2021-08-05

  • Fix build of dist files.
    • Note: this version ensures the changes from 3.7.0 are actually included in the dist files. Thanks to Evan W for reporting.
stuk
published 3.7.0 •

Changelog

Source

v3.7.0 2021-07-23

  • Fix: Use a null prototype object for this.files (see #766)
    • This change might break existing code if it uses prototype methods on the .files property of a zip object, for example zip.files.toString(). This approach is taken to prevent files in the zip overriding object methods that would exist on a normal object.
stuk
published 3.6.0 •

Changelog

Source

v3.6.0 2021-02-09

  • Fix: redirect main to dist on browsers (see #742)
  • Fix duplicate require DataLengthProbe, utils (see #734)
  • Fix small error in read_zip.md (see #703)
stuk
published 3.6.0-0 •

234Next
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc