
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
quickarchive
Advanced tools
This is a file archiving library designed to be as simple, fast and space efficient as possible. It's intended use is in transferring assets in web applications and runs on node.js an the browsers. It does not use compression.
##Why? Because if you have a web application with a large number of files that you need to load, it can be much quicker to load a single archive file than to load each file individually.
Additionally, many JavaScript implementations of existing archive formats (i.e. zip) either perform poorly, do not work as intended or don't work on both node.js and the broswer. QuickArchive prefers to create views of archived files instead of copies and therefore never uses much more memory than the size of the archive.
Compression is not included because most browsers and server support compression on the fly.
##API
First, create a new archive.
var myArchive = new QuickArchive();
//with optional comments
myArchive.comment("An archive file.");
Next, add some data to it.
//Data can be a string...
myArchive.addData("entry a", "Hello World");
//Or a buffer on node, or a ArrayBuffer or ArrayBufferView on browsers
myArchive.addData("entry b", new Buffer([1, 2, 3]));
//Also has optional comments
myArchive.addData("entry c", "This will be converted to binary data", "This is a text comment.");
Then call toBuffer() and do whatever you want with it.
//Returns a Buffer on Node and a Uint8Array on browsers
var buffer = myArchive.toBuffer();
To load files, pass a Buffer or ArrayBuffer or ArrayBufferView to the constructor.
//Copy the archive
var anotherArchive = new QuickArchive(buffer);
FAQs
An archiving library designed for delivering files to the browser in bulk.
We found that quickarchive demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.