
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
sk-form-data
Advanced tools
A middleware that automatically parses your SvelteKit form data for use with SvelteKit form actions.
This reduces boilerplate within SvelteKit form actions where the developer is tasked with parsing individual values from FormData or manually looping over entities via formData.entries().
You can use a package manager of your choice but npm is used by default.
npm i sk-form-data
Note to pnpm users: pnpm doesn't automatically install peer dependencies, so you might have to include @remix-run/web-file yourself with pnpm i @remix-run/web-file.
Add form_data to your other hooks inside hooks.server.ts. If you have existing hooks you can use sequence from SvelteKit to add more hooks.
// hooks.server.ts
import { sequence } from '@sveltejs/kit/hooks'
import { form_data } from 'sk-form-data'
export const handle = sequence(form_data)
If you're using TypeScript add these types inside src/app.d.ts.
// app.d.ts
declare namespace App {
interface Locals {
form_data: Record<string, any>
}
}
Your form actions will have a new form_data property in locals.
// +page.server.ts
export const actions = {
default: async function ({ locals }) {
console.log(locals.form_data); // whatever you sent from your form
// do rest of your stuff...
},
}
Use a form as you would in SvelteKit but keep in mind you can only use the POST method.
<!-- +page.svelte -->
<script lang="ts">
import { enhance } from '$app/forms'
</script>
<form method="POST" use:enhance>
<label for="title">Title: </label>
<input name="title" id="title" type="text" value="Scott" />
</form>
Inside your form actions you have access to the parsed form data inside locals.form_data you can pass to a function that transforms values based on your Zod schema for example.
// +page.server.ts
export const actions = {
default: async function ({ locals }) {
console.log(locals.form_data); // whatever you sent from your form
// do rest of your stuff...
},
}
A Tasty Treats Podcast for Web Developers.
FAQs
A hook / middleware to automatically parse form data in Svelte Kit.
We found that sk-form-data demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.