Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
This package has been deprecated with the following message: This version of tar is no longer supported, and will not receive security updates. Please upgrade asap.
Generated on Apr 9, 2024 via pnpm

tar 2.2.2

tar for node
Package summary
Share
5
issues
5
high severity
vulnerability
4
meta
1
2
licenses
12
ISC
6
MIT
Package created
20 Nov 2011
Version published
15 May 2019
Maintainers
6
Total deps
18
Direct deps
3
License
ISC

Issues

5

5 high severity issues

high
Recommendation: Upgrade to version 3.2.2 or later
via: tar@2.2.2
Recommendation: Upgrade to version 4.4.18 or later
via: tar@2.2.2
Recommendation: Upgrade to version 3.2.2 or later
via: tar@2.2.2
Recommendation: Upgrade to version 4.4.18 or later
via: tar@2.2.2
via: tar@2.2.2
Collapse
Expand

Licenses

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
12 Packages, Including:
block-stream@0.0.9
fs.realpath@1.0.0
fstream@1.0.12
glob@7.2.3
graceful-fs@4.2.11
inflight@1.0.6
inherits@2.0.4
minimatch@3.1.2
once@1.4.0
rimraf@2.7.1
tar@2.2.2
wrappy@1.0.2

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
6 Packages, Including:
balanced-match@1.0.2
brace-expansion@1.1.11
concat-map@0.0.1
minimist@1.2.8
mkdirp@0.5.6
path-is-absolute@1.0.1
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

3
All Dependencies CSV
β“˜ This is a list of tar 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
block-stream0.0.93.64 kBISC
prod
fstream1.0.1216.61 kBISC
prod
inherits2.0.41.98 kBISC
prod

Visualizations

Frequently Asked Questions

What does tar do?

"Tar" for Node.js is a fully-featured, fast archive utility. It is designed to mimic the tar(1) command's behavior on Unix systems by creating an archive of file system entries, which may include directories, files, links, etc. The name "tar" comes from "tape archive". It's created with an API allowing it to handle five main upper-level commands relating to creating, replacing, updating, listing, and extracting content from an archive. Tar is a particularly flexible and powerful tool in various coding situations, especially when dealing with large amounts of data.

How do you use tar?

The usage of "tar" differs depending on the specific action you want to perform on an archive. Here are usage examples for the main commands:

  • To create an archive:
const tar = require('tar');
tar.c(
  {
    gzip: true,
    file: 'my-tarball.tgz'
  },
  ['file1', 'file2', 'directory']
).then(() => {
  console.log('Tarball has been created.');
});
  • To extract an archive:
tar.x({
  file: 'my-tarball.tgz'
}).then(() => {
  console.log('Tarball has been extracted.');
});
  • To list out the contents of an archive:
tar.t({
  file: 'my-tarball.tgz',
  onentry: entry => console.log(entry.path)
});

The options object in each method can be used to further customize operation's behavior.

Where are the tar docs?

The documentation for the `