Hacker GitHub

← All repos

ronomon/zip

View on GitHub ↗ ★ 257 JavaScript

Robust ZIP decoder with defenses against dangerous compression ratios, spec deviations, malicious archive signatures, mismatching local and central directory headers, ambiguous UTF-8 filenames, directory and symlink traversals, invalid MS-DOS dates, overlapping headers, overflow, underflow, sparseness, accidental buffer bleeds etc.

4 mentions on Hacker News by 2 people: 1 story, 3 comments · first 2019-07-04 · latest 2025-08-26

Mentions per year 4 mentions · busiest year 2019 (2)
20082026
AllStoriesComments NewestTopOldest
  1. 1. I think you are thinking of https://github.com/ronomon/zip ? The description for pure says it is a static analysis tool for zip files. That makes it a linter in my book. 2. I see, thanks.
    comment by pabs3 · 2025-08-26 · in My ZIP isn't your ZIP: Identifying and exploiting semantic gaps between parsers
  2. …with simpler zip bombs. You would be amazed at what can crash an antivirus engine. Coincidentally, https://github.com/ronomon/zip can catch David Fifield's zip bomb.
    comment by jorangreef · 2020-05-10 · in How to crash an email server with a single email (2018)
  3. Thanks for the encouragement: https://github.com/ronomon/zip
    comment by jorangreef · 2019-07-04 · in A better zip bomb