
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
stream_upload
Advanced tools
Node.js library to stream files to several storage locations (s3, local ...)
#Stream uploads
Package to stream uploads to desired locations.
Install
npm install stream_upload
##Usage
var StreamUpload = require('stream_upload');
streamUpload = new StreamUpload({
extensions: [], // eg. ['jpeg', 'jpg', 'png']
types: [], // ['image/jpeg']
maxSize: 0, // 50000 -> max file size in bytes
baseFolder: '', // 'myFolder'
storage: {} // storage config variables
});
/**/
var params = {
size: {filesize in bytes},
type: {file mime-type}, filename}
filename: {my desired filename} // can also be path /path/to/filename.ext
streamUpload.upload(ReadStream, params);
default storage is local
currently supports only local and s3
###S3 config sample
{
storage: {
type: 'S3',
"accessKeyId": "MY_AWS_ACCESS_KEY",
"secretAccessKey": "MY_AWS_ACCESS_SECRET",
"region": "AWS_REGION",
"bucket": "S3_BUCKET",
"baseFolder": "myfolder" //optional
}
}
FAQs
Node.js library to stream files to several storage locations (s3, local ...)
The npm package stream_upload receives a total of 187 weekly downloads. As such, stream_upload popularity was classified as not popular.
We found that stream_upload demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.