Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 14, 2024 via pnpm

extract-zip 1.1.0

unzip a zip file into a directory using 100% pure gluten-free organic javascript
Package summary
Share
7
issues
2
critical severity
vulnerability
1
license
1
2
high severity
vulnerability
1
meta
1
2
moderate severity
vulnerability
2
1
low severity
vulnerability
1
4
licenses
15
MIT
1
N/A
1
BSD-2-Clause
1
ISC
Package created
17 Oct 2014
Version published
16 Sep 2015
Maintainers
2
Total deps
18
Direct deps
5
License
BSD-2-Clause

Issues

7

2 critical severity issues

critical
Recommendation: Upgrade to version 0.2.4 or later
via: mkdirp@0.5.0
Recommendation: Check the package code and files for license information
via: debug@0.7.4
Collapse
Expand

2 high severity issues

high
Recommendation: Upgrade to version 2.6.9 or later
via: debug@0.7.4
via: mkdirp@0.5.0
Collapse
Expand

2 moderate severity issues

moderate
Recommendation: Upgrade to version 1.5.2 or later
via: concat-stream@1.5.0
Recommendation: Upgrade to version 0.2.1 or later
via: mkdirp@0.5.0
Collapse
Expand

1 low severity issue

low
Recommendation: Upgrade to version 2.6.9 or later
via: debug@0.7.4
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
15 Packages, Including:
async@0.9.0
buffer-crc32@0.2.13
concat-stream@1.5.0
core-util-is@1.0.3
fd-slicer@1.1.0
isarray@1.0.0
minimist@0.0.8
mkdirp@0.5.0
pend@1.2.0
process-nextick-args@1.0.7
readable-stream@2.0.6
string_decoder@0.10.31
typedarray@0.0.7
util-deprecate@1.0.2
yauzl@2.10.0

N/A

N/A
1 Packages, Including:
debug@0.7.4

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
extract-zip@1.1.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
inherits@2.0.4
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

5
All Dependencies CSV
β“˜ This is a list of extract-zip 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
async0.9.019.38 kBMIT
prod
concat-stream1.5.03.52 kBMIT
prod
1
debug0.7.44.11 kBUNKNOWN
prod
1
1
1
mkdirp0.5.04.97 kBMIT
prod
1
1
1
yauzl2.10.018.26 kBMIT
prod

Visualizations

Frequently Asked Questions

What does extract-zip do?

The npm package "extract-zip" is a handy tool written purely in JavaScript. This utility is used to unzip or extract ZIP files into a specific directory. It leverages the features of the 'yauzl' ZIP parser for optimal function. The package can be utilized via a command line program or, alternatively, it can be incorporated into JavaScript code as a library.

How do you use extract-zip?

To use "extract-zip", install the package through npm by running npm install extract-zip --save for application usage or npm install extract-zip -g for global command line usage.

In your JavaScript code, you can require and use the package as follows:

const extract = require('extract-zip')

async function main () {
  try {
    await extract(source, { dir: target })
    console.log('Extraction complete')
  } catch (err) {
    // handle any errors
  } 
}

In the code snippet above, source refers to the ZIP file you wish to extract, while target specifies the directory where the extracted files will be stored.

In a command line context, you can use "extract-zip' as follows:

extract-zip foo.zip <targetDirectory>

Here foo.zip is the ZIP file to be extracted, and targetDirectory specifies the directory where the extracted files will be written. If targetDirectory is not specified, it will default to process.cwd() (the current working directory).

Where are the extract-zip docs?

For comprehensive details on how to use "extract-zip", please visit the official GitHub repository. The README file in the repository provides an extensive overview, code usage examples, and options for customization. Do pay particular attention to the "Options" section to understand how you can specify directory permissions, handle zip file entries, and more.