`tmp`

Ecosystem:
npm

Package URL:
pkg:npm/tmp

Total PRs:
32,065 Dependabot PRs

Latest PR:
about 1 hour ago

Unique Repositories:
31,637 repositories

Unique Repos (30 days):
1,697 repositories

Security Advisories

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

GHSA-52f5-9888-hmc6 CVE-2025-54798 LOW published about 1 month ago • updated 22 days ago

### Summary `tmp@0.2.3` is vulnerable to an Arbitrary temporary file / directory write via symbolic link `dir` parameter. ### Details According...

Recent PRs

RSS Feed

Bump the npm_and_yarn group across 1 directory with 10 updates

ibiscum/Vue.js-3-for-Beginners #10

0.2.1 → 0.2.5 Patch PR

Closed 1 day ago 1 comment

chore(deps): bump tmp and inquirer

telerik/kendo-themes #5584

0.2.3 → 0.2.5 Patch PR

Open 1 day ago

Bump tmp and @graphql-codegen/cli in /catalog

quiltdata/quilt #4533

removed Removal PR

Open 1 day ago

chore(deps): bump tmp and @inquirer/editor

jhipster/generator-jhipster-nodejs #947

removed Removal PR

Merged 1 day ago

Bump tmp from 0.2.3 to 0.2.5 in /frontend

opf/openproject #20215

0.2.3 → 0.2.5 Patch PR

Open 1 day ago

Bump tmp and react-scripts

edenworkroom/stoken #13

Open 1 day ago

Bump tmp and @inquirer/editor

lechibang-1512/mycelium #11

removed Removal PR

Merged 1 day ago

Bump tmp and @inquirer/editor

anilahir/nestjs-authentication-and-authorization #1073

removed Removal PR

Open 1 day ago

build(deps): bump tmp and inquirer

digabi/exam-engine #4748

0.2.1 → 0.2.5 Patch PR

Merged 1 day ago

Bump tmp and @inquirer/editor

mkwtys/typei #872

removed Removal PR

Open 2 days ago

Bump tmp and @inquirer/editor

rafal-majewski/nodejs-app-template #1105

removed Removal PR

Merged 2 days ago

Bump tmp and @nestjs/cli in /examples/redis-store

iamolegga/nestjs-session #1733

removed Removal PR

Merged 2 days ago

Bump tmp from 0.2.3 to 0.2.5

ivmartel/dwv-angular #1081

0.2.3 → 0.2.5 Patch PR

Merged 2 days ago

build(deps-dev): bump tmp from 0.2.3 to 0.2.5

WRLDInc/wrld-open-webui #8

0.2.3 → 0.2.5 Patch PR

Open 2 days ago

Bump the npm_and_yarn group across 1 directory with 5 updates

henryperkins/dj-judas #2

0.0.33 → removed

Open 2 days ago 2 comments

chore(deps): bump tmp from 0.2.3 to 0.2.5 in the npm_and_yarn group across 1 directory

stabldev/highlight.svelte #356

0.2.3 → 0.2.5 Patch PR

Open 2 days ago

build(deps): bump tmp and inquirer in /examples/include-external-npm-packages-lock-file

serverless-heaven/serverless-webpack #2225

removed Removal PR

Merged 2 days ago

Bump tmp and inquirer in /extension

touchthesun/marvin #27

removed Removal PR

Open 2 days ago

Bump tmp and gatsby

brandonjurado/brandonjurado.github.io #48

0.0.33 → 0.2.5 Minor PR

Closed 2 days ago 1 comment

build(deps): bump tmp and @inquirer/editor

sjclark76/metvuw-mobile #1751

removed Removal PR

Open 2 days ago 1 comment

Bump tmp and @changesets/cli in /pkgs/github-tools

Duncan3142/mono #162

removed Removal PR

Open 2 days ago

Bump tmp from 0.2.3 to 0.2.5

mustafagenc/aprs #3

0.2.3 → 0.2.5 Patch PR

Open 2 days ago

build(deps): Bump the npm_and_yarn group across 1 directory with 4 updates

basher83/Laniakea-Edge #2

0.2.3 → 0.2.5 Patch PR

Open 2 days ago 1 comment

Bump tmp from 0.2.3 to 0.2.5 in the npm_and_yarn group across 1 directory

AbhiArya20/current-ui #1

0.2.3 → 0.2.5 Patch PR

Merged 2 days ago 1 comment

Bump tmp from 0.2.3 to 0.2.5 in the npm_and_yarn group across 1 directory

AbhiArya20/current-learnings #1

0.2.3 → 0.2.5 Patch PR

Open 2 days ago 2 comments

build(deps): bump tmp from 0.2.1 to 0.2.5

akhil-rana/peerivate #154

0.2.1 → 0.2.5 Patch PR

Merged 2 days ago 1 comment

Bump tmp and inquirer

UjjwalSaini07/InvestIQ #43

0.2.3 → 0.2.5 Patch PR

Open 2 days ago 1 comment

chore(deps): bump tmp and takomo in /integration-test/configs/hook-outputs/app

takomo-io/takomo #478

removed Removal PR

Open 2 days ago

Bump the npm_and_yarn group across 1 directory with 10 updates

ibiscum/Vue.js-3-for-Beginners #6

0.2.1 → 0.2.5 Patch PR

Open 2 days ago 1 comment

Bump tmp from 0.2.3 to 0.2.5 in /frontend/app

puresign-tokyo/l-uploader #26

0.2.3 → 0.2.5 Patch PR

Merged 2 days ago

Bump the npm_and_yarn group across 1 directory with 4 updates

Tapovan1/hmt-tapovan #5

0.2.3 → 0.2.5 Patch PR

Open 2 days ago

chore(deps): bump tmp and @inquirer/editor

newerton/notification-engine #19

removed Removal PR

Merged 2 days ago

chore(deps): bump tmp and @inquirer/editor in /microservice

newerton/redis-stream-poc #20

removed Removal PR

Merged 2 days ago

Bump tmp from 0.2.1 to 0.2.5

chuckderosier/bbq-atlanta #83

0.2.1 → 0.2.5 Patch PR

Merged 2 days ago

chore(deps): bump tmp from 0.2.3 to 0.2.5 in the npm_and_yarn group across 1 directory

Attraccess/Attraccess #135

0.2.3 → 0.2.5 Patch PR

Merged 2 days ago 1 comment

Bump tmp from 0.2.1 to 0.2.5 in the npm_and_yarn group across 1 directory

DaxServer/wiki-userscripts #2

0.2.1 → 0.2.5 Patch PR

Open 2 days ago

build(deps): bump tmp and inquirer

mdresch/adpa #79

removed Removal PR

Open 2 days ago

Bump tmp and @inquirer/editor

juicyllama/nestjs-scrapingbee #18

removed Removal PR

Open 2 days ago

Bump the npm_and_yarn group across 1 directory with 37 updates

tris/flyxc #2

0.2.1 → 0.2.5 Patch PR

Open 3 days ago

Bump the npm_and_yarn group across 2 directories with 5 updates

MechanikGamer/BiteBuddy #13

0.2.3 → 0.2.5 Patch PR

Open 3 days ago

Bump the npm_and_yarn group across 2 directories with 4 updates

unify-apps/workflow-use #1

0.2.3 → 0.2.5 Patch PR

Open 3 days ago

chore(deps): bump tmp from 0.2.3 to 0.2.5

6pac/SlickGrid #1144

0.2.3 → 0.2.5 Patch PR

Merged 3 days ago

Bump tmp from 0.2.1 to 0.2.5

rugieri/house-marketplace #28

0.2.1 → 0.2.5 Patch PR

Open 3 days ago

Bump the npm_and_yarn group across 2 directories with 6 updates

harr1424/clients #3

0.0.33 → 0.2.3 Minor PR

Open 3 days ago

chore(deps): bump tmp and @inquirer/editor

nestjs/elasticsearch #1692

removed Removal PR

Open 3 days ago

chore(deps): bump tmp and @inquirer/editor

soundshiner/discord-bot #2

removed Removal PR

Closed 3 days ago

Bump the npm_and_yarn group across 1 directory with 20 updates

V4NT-ORG/lingva-translate-revive #4

0.2.1 → 0.2.5 Patch PR

Open 3 days ago

Bump the npm_and_yarn group across 1 directory with 4 updates

theblacklung187/DECK_BUILD #1

0.2.3 → 0.2.5 Patch PR

Open 3 days ago

Bump the npm_and_yarn group across 1 directory with 16 updates

sumonst21/ttag-cli #1

0.0.33 → 0.2.4 Minor PR

Open 3 days ago

Bump the npm_and_yarn group across 2 directories with 15 updates

hopdot/HCXD #25

0.0.33 → removed

Open 3 days ago

Package Details

Name:	`tmp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tmp`
JSON API:	View JSON

Security Advisories

1

Active advisories

LOW 1

View All npm Advisories

Package Information

Description:

Temporary file and directory creator

Repository:	https://github.com/raszi/node-tmp
Homepage:	http://github.com/raszi/node-tmp
Latest Release:	`0.2.3` over 1 year ago
Dependent Repos:	992,625
Dependent Packages:	7,547
Downloads:	226,024,983
Ranking:	Top 0.0343% by dependent repos Top 0.0073% by downloads Top 0.0126% by dependent pkgs

PR Status

Open 29,874 (93.2%)

Merged 1,580 (4.9%)

Closed 587 (1.8%)

PR Types

Removal 25,955 (81.0%)

Minor 655 (2.0%)

Patch 5,281 (16.5%)