
Security News
NIST Officially Stops Enriching Most CVEs as Vulnerability Volume Skyrockets
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.
metadata-extract
Advanced tools
Extract metadata from various types of media file using 'pluggable' extractors.
const extract = require('metadata-extract')
const metadata = await extract(sourceFilename, options)
options is an optional object which may include:
options.extractors - An array of extractors to use. These should be either filenames of the extractors included in the extractors directory of this module, or promise-returning functions of the form:
async function (data, input) {
return metadata
}
input is existing metadata found by other extractors. input.mimetype will contain the mime-type if detected.metadata must be an object containing the metadata found, or undefined if nothing was extracted.options.log - A logger function (defaults to debug)options.allowBuffers - If true, buffers will be allowed inmetadata is an object containing the metadata found.
extractors/music-metadata - Extract music-metdataextractors/exif-tool - Extract using exiftool - requires exiftool to be installed as an external dependency. Disabled by default.extractors/image-size - Get the size of images using image-sizeextractors/pdf-text - extracts text from PDFs using pdf2jsonextractors/text - extracts the beginning of text filesextractors/zip - extracts directory listing from zip filesextractors/epub - extracts text preview or contents listing from epub filesFAQs
Extract metadata from media files, with pluggable add-ons.
We found that metadata-extract demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.

Company News
/Security News
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.