Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Simple, tiny and fast ZIP library. It has our own DEFLATE compressor and decompressor (alternative to pako.js / ZLIB). It was made from scratch, without using existing implemetnations.
The uzip npm package is a lightweight library for handling ZIP file operations in JavaScript. It allows you to create, read, and extract ZIP files efficiently.
Create ZIP File
This feature allows you to create a ZIP file from a set of files. The code sample demonstrates how to create a ZIP file containing a single text file named 'hello.txt' with the content 'Hello, World!'.
const UZIP = require('uzip');
const files = {
'hello.txt': new TextEncoder().encode('Hello, World!')
};
const zipData = UZIP.encode(files);
console.log(zipData);
Extract ZIP File
This feature allows you to extract files from a ZIP archive. The code sample shows how to parse a ZIP file's binary data and extract its contents.
const UZIP = require('uzip');
const zipData = /* some binary data representing a ZIP file */;
const files = UZIP.parse(zipData);
console.log(files);
List Files in ZIP
This feature allows you to list the files contained in a ZIP archive. The code sample demonstrates how to parse a ZIP file and list the names of the files it contains.
const UZIP = require('uzip');
const zipData = /* some binary data representing a ZIP file */;
const files = UZIP.parse(zipData);
const fileNames = Object.keys(files);
console.log(fileNames);
JSZip is a powerful library for creating, reading, and editing .zip files with a more extensive API compared to uzip. It supports both Node.js and browser environments and offers more features such as compression levels and asynchronous operations.
ADM-ZIP is another library for handling ZIP files in Node.js. It provides a straightforward API for creating, reading, and extracting ZIP files. ADM-ZIP is known for its ease of use and additional features like adding files from buffers and streams.
Yauzl is a ZIP file reader for Node.js that focuses on correctness and streaming. It is designed to handle large ZIP files efficiently by using a streaming API, which can be more memory-efficient compared to uzip.
Simple, tiny and fast ZIP library. It has our own DEFLATE compressor and decompressor (alternative to pako.js / ZLIB). It was made from scratch, without using existing implemetnations.
UZIP.js is faster than pako.js
Web: Add the UZIP.js
script to your webpage:
<script src="UZIP.js"></script>
NodeJS: Install the uzip
package:
npm install uzip
UZIP.parse(buff)
buff
: ArrayBuffer of the ZIP filekey : property
pairs, where key
is a file name (String), and property
is a file (Uint8Array)UZIP.encode(obj)
obj
: object with key : property
pairs (see above)Directories should be "included" inside file names.
var obj = { "file.txt":new Uint8Array([72,69,76,76,79]), "dir/photo.jpg":..., "dir/pic.png":... };
var zip = UZIP.encode(obj);
The API is the same as the API of pako.js, just use UZIP.xyz...
instead of pako.xyz...
.
UZIP.deflateRaw(buff)
buff
: Uint8Array of the original fileUZIP.deflate(buff)
buff
: Uint8Array of the original fileThese two functions have an optional third parameter: Options object,
which can be {level:L}
, where L is the level of compression (0 to 9).
UZIP.inflateRaw(buff)
buff
: Uint8Array containing the deflate streamUZIP.inflate(buff)
buff
: Uint8Array containing the ZLIB streamThese two functions have an optional third parameter: Output buffer (Uint8Array).
DEFLATE or ZLIB stream do not directly store the size of the output uncompressed data. Decompressors usually write the result into a small array, which is enlarged (copied into a bigger array) during the process.
Practical applications of DEFLATE (like ZIP or PNG files) usually store the size of uncompressed data. If you provide the output buffer, decompression is faster (no need for gradual enlarging of the output array).
FAQs
Simple, tiny and fast ZIP library. It has our own DEFLATE compressor and decompressor (alternative to pako.js / ZLIB). It was made from scratch, without using existing implemetnations.
The npm package uzip receives a total of 163,370 weekly downloads. As such, uzip popularity was classified as popular.
We found that uzip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.