pompelmi/pompelmi: free, open-source file scanner
Pompelmi is an open-source Node.js library for scanning file uploads before they reach disk. It provides composable scanners with optional YARA integration, deep ZIP inspection with bomb protection, and drop-in adapters for Express, Koa, Next.js, and Fastify. The library runs entirely in-process with no external API calls, includes built-in heuristics for detecting risky PDF actions and Office macros, and offers TypeScript-first design with configurable policies for file size, MIME types, and extensions. It also includes a GitHub Action for CI/CD scanning of repository files and artifacts.