`tmp`

Ecosystem:
npm

Package URL:
pkg:npm/tmp

Total PRs:
31,977 Dependabot PRs

Latest PR:
about 3 hours ago

Unique Repositories:
31,568 repositories

Unique Repos (30 days):
1,740 repositories

Security Advisories

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

GHSA-52f5-9888-hmc6 CVE-2025-54798 LOW published about 1 month ago • updated 21 days ago

### Summary `tmp@0.2.3` is vulnerable to an Arbitrary temporary file / directory write via symbolic link `dir` parameter. ### Details According...

Recent PRs

RSS Feed

build(deps-dev): bump tmp from 0.2.3 to 0.2.5

WRLDInc/wrld-open-webui #8

0.2.3 → 0.2.5 Patch PR

Open about 3 hours ago

Bump the npm_and_yarn group across 1 directory with 5 updates

henryperkins/dj-judas #2

0.0.33 → removed

Open about 3 hours ago 2 comments

chore(deps): bump tmp from 0.2.3 to 0.2.5 in the npm_and_yarn group across 1 directory

stabldev/highlight.svelte #356

0.2.3 → 0.2.5 Patch PR

Open about 3 hours ago

build(deps): bump tmp and inquirer in /examples/include-external-npm-packages-lock-file

serverless-heaven/serverless-webpack #2225

removed Removal PR

Open about 4 hours ago

Bump tmp and inquirer in /extension

touchthesun/marvin #27

removed Removal PR

Open about 4 hours ago

Bump tmp and gatsby

brandonjurado/brandonjurado.github.io #48

0.0.33 → 0.2.5 Minor PR

Closed about 5 hours ago 1 comment

build(deps): bump tmp and @inquirer/editor

sjclark76/metvuw-mobile #1751

removed Removal PR

Open about 7 hours ago 1 comment

Bump tmp and @changesets/cli in /pkgs/github-tools

Duncan3142/mono #162

removed Removal PR

Open about 7 hours ago

Bump tmp from 0.2.3 to 0.2.5

mustafagenc/aprs #3

0.2.3 → 0.2.5 Patch PR

Open about 7 hours ago

build(deps): Bump the npm_and_yarn group across 1 directory with 4 updates

basher83/Laniakea-Edge #2

0.2.3 → 0.2.5 Patch PR

Open about 9 hours ago 1 comment

Bump tmp from 0.2.3 to 0.2.5 in the npm_and_yarn group across 1 directory

AbhiArya20/current-ui #1

0.2.3 → 0.2.5 Patch PR

Merged about 9 hours ago 1 comment

Bump tmp from 0.2.3 to 0.2.5 in the npm_and_yarn group across 1 directory

AbhiArya20/current-learnings #1

0.2.3 → 0.2.5 Patch PR

Open about 10 hours ago 2 comments

build(deps): bump tmp from 0.2.1 to 0.2.5

akhil-rana/peerivate #154

0.2.1 → 0.2.5 Patch PR

Merged about 10 hours ago 1 comment

Bump tmp and inquirer

UjjwalSaini07/InvestIQ #43

0.2.3 → 0.2.5 Patch PR

Open about 13 hours ago 1 comment

chore(deps): bump tmp and takomo in /integration-test/configs/hook-outputs/app

takomo-io/takomo #478

removed Removal PR

Open about 13 hours ago

Bump tmp from 0.2.3 to 0.2.5 in /frontend/app

puresign-tokyo/l-uploader #26

0.2.3 → 0.2.5 Patch PR

Merged about 13 hours ago

Bump the npm_and_yarn group across 1 directory with 4 updates

Tapovan1/hmt-tapovan #5

0.2.3 → 0.2.5 Patch PR

Open about 13 hours ago

chore(deps): bump tmp and @inquirer/editor

newerton/notification-engine #19

removed Removal PR

Merged about 14 hours ago

chore(deps): bump tmp and @inquirer/editor in /microservice

newerton/redis-stream-poc #20

removed Removal PR

Merged about 14 hours ago

Bump tmp from 0.2.1 to 0.2.5

chuckderosier/bbq-atlanta #83

0.2.1 → 0.2.5 Patch PR

Merged about 14 hours ago

chore(deps): bump tmp from 0.2.3 to 0.2.5 in the npm_and_yarn group across 1 directory

Attraccess/Attraccess #135

0.2.3 → 0.2.5 Patch PR

Merged about 15 hours ago 1 comment

Bump tmp from 0.2.1 to 0.2.5 in the npm_and_yarn group across 1 directory

DaxServer/wiki-userscripts #2

0.2.1 → 0.2.5 Patch PR

Open about 16 hours ago

build(deps): bump tmp and inquirer

mdresch/adpa #79

removed Removal PR

Open about 16 hours ago

Bump tmp and @inquirer/editor

juicyllama/nestjs-scrapingbee #18

removed Removal PR

Open about 18 hours ago

Bump the npm_and_yarn group across 1 directory with 37 updates

tris/flyxc #2

0.2.1 → 0.2.5 Patch PR

Open about 20 hours ago

Bump the npm_and_yarn group across 2 directories with 5 updates

MechanikGamer/BiteBuddy #13

0.2.3 → 0.2.5 Patch PR

Open about 20 hours ago

Bump the npm_and_yarn group across 2 directories with 4 updates

unify-apps/workflow-use #1

0.2.3 → 0.2.5 Patch PR

Open about 20 hours ago

chore(deps): bump tmp from 0.2.3 to 0.2.5

6pac/SlickGrid #1144

0.2.3 → 0.2.5 Patch PR

Merged 1 day ago

Bump tmp from 0.2.1 to 0.2.5

rugieri/house-marketplace #28

0.2.1 → 0.2.5 Patch PR

Open 1 day ago

Bump the npm_and_yarn group across 2 directories with 6 updates

harr1424/clients #3

0.0.33 → 0.2.3 Minor PR

Open 1 day ago

chore(deps): bump tmp and @inquirer/editor

nestjs/elasticsearch #1692

removed Removal PR

Open 1 day ago

chore(deps): bump tmp and @inquirer/editor

soundshiner/discord-bot #2

removed Removal PR

Closed 1 day ago

Bump the npm_and_yarn group across 1 directory with 20 updates

V4NT-ORG/lingva-translate-revive #4

0.2.1 → 0.2.5 Patch PR

Open 1 day ago

Bump the npm_and_yarn group across 1 directory with 4 updates

theblacklung187/DECK_BUILD #1

0.2.3 → 0.2.5 Patch PR

Open 1 day ago

Bump the npm_and_yarn group across 1 directory with 16 updates

sumonst21/ttag-cli #1

0.0.33 → 0.2.4 Minor PR

Open 1 day ago

Bump the npm_and_yarn group across 2 directories with 15 updates

hopdot/HCXD #25

0.0.33 → removed

Open 1 day ago

chore(deps): bump tmp from 0.2.3 to 0.2.5 in /frontend in the npm_and_yarn group across 1 directory

BBMRI-ERIC/negotiator #882

0.2.3 → 0.2.5 Patch PR

Open 1 day ago

build(deps): bump tmp from 0.2.3 to 0.2.5

i18n-pro/vue #11

0.2.3 → 0.2.5 Patch PR

Open 1 day ago

build(deps): bump tmp from 0.2.3 to 0.2.5

i18n-pro/core #8

0.2.3 → 0.2.5 Patch PR

Closed 2 days ago

chore(deps): bump tmp and @changesets/cli

gengle/rocket #15

removed Removal PR

Open 2 days ago

Bump tmp and inquirer

CPS-Innovation/victim-contact-application--alpha #12

removed Removal PR

Open 2 days ago

Bump tmp and web-ext-run

takanakahiko/slack-emoji-meister #707

0.2.3 → 0.2.5 Patch PR

Open 2 days ago

Bump tmp and lerna

valiot/matomo-tracker #21

0.0.33 → 0.2.5 Minor PR

Open 2 days ago

Bump tmp and inquirer in /ecommerce-web

free-might-bobger/psr-4 #3

removed Removal PR

Open 2 days ago

Bump tmp and devvit

Juuuuuh1/lexicon-clash #4

removed Removal PR

Open 2 days ago

chore(deps): bump tmp and inquirer

angular-hispano/angular-docs-es #46

0.2.3 → 0.2.5 Patch PR

Closed 2 days ago 1 comment

Bump tmp and react-scripts

vaibsharma/vaibsharma.github.io #1

removed Removal PR

Open 2 days ago

Bump the npm_and_yarn group across 1 directory with 14 updates

se2026/ORCID-Source #2

0.2.1 → 0.2.5 Patch PR

Open 2 days ago

deps(dev): bump tmp from 0.2.3 to 0.2.5

sws2apps/organized-app #4498

0.2.3 → 0.2.5 Patch PR

Merged 2 days ago 3 comments

Bump tmp from 0.2.1 to 0.2.5

Long1351/Webserver #13

0.2.1 → 0.2.5 Patch PR

Merged 2 days ago 1 comment

Package Details

Name:	`tmp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tmp`
JSON API:	View JSON

Security Advisories

1

Active advisories

LOW 1

View All npm Advisories

Package Information

Description:

Temporary file and directory creator

Repository:	https://github.com/raszi/node-tmp
Homepage:	http://github.com/raszi/node-tmp
Latest Release:	`0.2.3` over 1 year ago
Dependent Repos:	992,625
Dependent Packages:	7,547
Downloads:	226,024,983
Ranking:	Top 0.0343% by dependent repos Top 0.0073% by downloads Top 0.0126% by dependent pkgs

PR Status

Open 29,850 (93.3%)

Merged 1,556 (4.9%)

Closed 567 (1.8%)

PR Types

Removal 25,927 (81.1%)

Minor 650 (2.0%)

Patch 5,248 (16.4%)