Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

unzip-stream

Ecosystem:
npm
Package URL:
pkg:npm/unzip-stream
Total PRs:
29 Dependabot PRs
Latest PR:
2 months ago
Unique Repositories:
24 repositories
Unique Repos (30 days):
1 repository
Security Advisories
unzip-stream allows Arbitrary File Write via artifact extraction
GHSA-6jrj-vc65-c983 HIGH published almost 2 years ago • updated 2 months ago
### Impact When using the `Extract()` method of unzip-stream, malicious zip files were able to write to paths they shouldn't be allowed to. ### P...
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump the npm_and_yarn group across 2 directories with 21 updates

lotsofthoughts/theia #2

0.3.1 → 0.3.2 Patch PR
Closed 2 months ago 1 comment
lotsofthoughts
chore(deps): bump the npm_and_yarn group across 6 directories with 25 updates

YoutacRandS-VA/passport #18

0.3.1 → 0.3.4 Patch PR
Open 3 months ago 2 comments
YoutacRandS-VA
chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates

JoftheV/passport #9

0.3.1 → 0.3.4 Patch PR
Closed 3 months ago 2 comments
JoftheV
chore(deps): bump the npm_and_yarn group across 3 directories with 27 updates

JoftheV/passport #8

0.3.1 → 0.3.4 Patch PR
Closed 3 months ago 2 comments
JoftheV
chore(deps): bump the npm_and_yarn group across 4 directories with 25 updates

YoutacRandS-VA/passport #17

0.3.1 → 0.3.4 Patch PR
Closed 3 months ago 3 comments
YoutacRandS-VA
build(deps): bump the npm_and_yarn group across 4 directories with 27 updates

CasP0/theia #3

0.3.1 → 0.3.2 Patch PR
Closed 3 months ago 1 comment
CasP0
chore(deps): bump the npm_and_yarn group across 5 directories with 23 updates

philipjonsen/passport #2

0.3.1 → 0.3.4 Patch PR
Closed 4 months ago 1 comment
philipjonsen
Bump the npm_and_yarn group across 1 directory with 5 updates

hashim21223445/actions #12

0.3.1 → 0.3.4 Patch PR
Closed 8 months ago 2 comments
hashim21223445
Bump the npm_and_yarn group across 1 directory with 10 updates

isotoma/fetch-local-executable #7

0.3.1 → 0.3.2 Patch PR
Open 8 months ago 2 comments
isotoma
Bump unzip-stream from 0.3.1 to 0.3.4

N-Storm/cuda-toolkit #7

0.3.1 → 0.3.4 Patch PR
Open 8 months ago 4 comments
N-Storm
Bump unzip-stream from 0.3.1 to 0.3.4

Autodesk-AutoCAD/AutoLispExt #258

0.3.1 → 0.3.4 Patch PR
Open 8 months ago
Autodesk-AutoCAD
Bump unzip-stream from 0.3.0 to 0.3.4

hiroki-harada/elm-todo #9

0.3.0 → 0.3.4 Patch PR
Open 9 months ago
hiroki-harada
Bump the npm_and_yarn group across 1 directory with 6 updates

40yanny/download-artifact #4

0.3.1 → 0.3.4 Patch PR
Open 9 months ago 1 comment
40yanny
Bump the npm_and_yarn group across 1 directory with 48 updates

Centaurioun/etcher #32

0.3.1 → 0.3.4 Patch PR
Open 9 months ago
Centaurioun
Bump the npm_and_yarn group across 1 directory with 12 updates

Jackblanket847/vscode-yaml #1

0.3.1 → 0.3.4 Patch PR
Open 10 months ago
Jackblanket847
Bump the npm_and_yarn group across 5 directories with 15 updates

Refina123/mk-hack #1

0.3.1 → 0.3.2 Patch PR
Open 10 months ago
Refina123
Bump unzip-stream from 0.3.1 to 0.3.4 in /.github/actions/tamper-artifact

slsa-framework/example-package #443

0.3.1 → 0.3.4 Patch PR
Open 10 months ago
slsa-framework
Bump unzip-stream from 0.3.1 to 0.3.4 in /.github/actions/tamper-artifact-new

slsa-framework/example-package #442

0.3.1 → 0.3.4 Patch PR
Merged 10 months ago
slsa-framework
Bump unzip-stream from 0.3.1 to 0.3.4

Memohalliwell/download-artifact #4

0.3.1 → 0.3.4 Patch PR
Open 11 months ago
Memohalliwell
Bump unzip-stream from 0.3.0 to 0.3.4 in /www-client

kakkun61/photo-film-dev #3

0.3.0 → 0.3.4 Patch PR
Merged 11 months ago
kakkun61
Bump the npm_and_yarn group with 6 updates

austenstone/security-export #10

0.3.1 → 0.3.4 Patch PR
Open 12 months ago
austenstone
Bump unzip-stream from 0.3.1 to 0.3.4

344mehmet/download-artifact #4

0.3.1 → 0.3.4 Patch PR
Open 12 months ago
344mehmet
Bump unzip-stream from 0.3.0 to 0.3.4

miniBill/elm-image #6

0.3.0 → 0.3.4 Patch PR
Open about 1 year ago
miniBill
chore(deps): bump the npm_and_yarn group across 5 directories with 33 updates

JoftheV/passport #7

0.3.1 → 0.3.4 Patch PR
Open about 1 year ago
JoftheV
build(deps): bump unzip-stream from 0.3.1 to 0.3.2

dxos/dxos #7556

0.3.1 → 0.3.2 Patch PR
Closed almost 2 years ago 4 comments
dxos
Bump unzip-stream from 0.3.1 to 0.3.4 in /src/tests/data

Checkmarx/ast-cli-javascript-wrapper #745

0.3.1 → 0.3.4 Patch PR
Closed almost 2 years ago 2 comments
Checkmarx
build(deps): bump unzip-stream from 0.3.0 to 0.3.4 in /elm/bob

draptik/exercism #25

0.3.0 → 0.3.4 Patch PR
Merged almost 2 years ago
draptik
Package Details
Name: unzip-stream
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/unzip-stream
JSON API: View JSON
Security Advisories

1

Active advisories
HIGH 1
View All npm Advisories
Package Information
Description:

Process zip files using streaming API

Repository: https://github.com/mhr3/unzip-stream
Homepage: https://github.com/mhr3/unzip-stream#readme
Latest Release: 0.3.4
about 2 years ago
Dependent Repos: 3,798
Dependent Packages: 264
Downloads: 1,270,184
Ranking: Top 0.3671% by dependent repos Top 0.3278% by downloads Top 0.1892% by dependent pkgs
PR Status
Open 16 (55.2%)
Merged 3 (10.3%)
Closed 9 (31.0%)
PR Types
Minor 1 (3.4%)
Patch 27 (93.1%)