https://github.com/isaacs/node-tar
npm-cli
Score: 34.23314058014936
Last synced: about 21 hours ago
JSON representation
Repository metadata:
tar for node
- Host: GitHub
- URL: https://github.com/isaacs/node-tar
- Owner: isaacs
- License: blueoak-1.0.0
- Created: 2011-03-27T22:17:23.000Z (over 15 years ago)
- Default Branch: main
- Last Pushed: 2026-07-24T15:47:55.000Z (about 2 months ago)
- Last Synced: 2026-09-11T16:37:11.723Z (4 days ago)
- Topics: npm-cli
- Language: JavaScript
- Homepage:
- Size: 9.67 MB
- Stars: 921
- Watchers: 38
- Forks: 280
- Open Issues: 13
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE.md
- Code of conduct: CODE_OF_CONDUCT.md
-
Funding:
- Github: isaacs
Owner metadata:
- Name: isaacs
- Login: isaacs
- Email: i@izs.me
- Kind: user
- Description: npm inventor, founder npm, Inc. Former Node BDFL. All opinions are my own. Literally all of them. I own them all.
- Website: http://blog.izs.me
- Location: Oakland CA
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/9287?u=55c7d6ddb9f37d0ad9785c313b50d737d58bf79b&v=4
- Repositories: 487
- Last Synced at: 2026-09-15T03:25:27.708Z
- Profile URL: https://github.com/isaacs
GitHub Events
Total
- Create event: 5
- Delete event: 2
- Fork event: 21
- Issue comment event: 23
- Issues event: 20
- Pull request event: 14
- Pull request review comment event: 1
- Pull request review event: 3
- Push event: 22
- Watch event: 45
- Total: 156
Last Year
- Create event: 3
- Delete event: 1
- Fork event: 15
- Issue comment event: 15
- Issues event: 8
- Pull request event: 11
- Pull request review comment event: 1
- Pull request review event: 2
- Push event: 22
- Watch event: 12
- Total: 90
Committers metadata
Last synced: 2 days ago
Total Commits: 813
Total Committers: 49
Avg Commits per committer: 16.592
Development Distribution Score (DDS): 0.13
Commits in past year: 82
Committers in past year: 12
Avg Commits per committer in past year: 6.833
Development Distribution Score (DDS) in past year: 0.146
| Name | Commits | |
|---|---|---|
| isaacs | i****@i****e | 707 |
| Luke Karrys | l****e@l****m | 21 |
| dependabot[bot] | 4****] | 14 |
| Forrest L Norvell | f****t@n****m | 7 |
| Kat Marchán | k****m@s****g | 5 |
| Jamie Magee | j****e@g****m | 4 |
| Ryan Day | s****r@g****m | 4 |
| Ryan Graham | r****m@g****m | 4 |
| github-actions[bot] | 4****] | 2 |
| Gar | g****h@d****r | 2 |
| Joshua van Rijswijk | j****a@g****m | 2 |
| Mike Ryan | m****n@t****m | 2 |
| Rebecca Turner | m****e@r****g | 2 |
| Tim Cuthbertson | t****m@g****t | 2 |
| CommanderRoot | C****t | 1 |
| Bryce Gibson | b****e@g****u | 1 |
| Bradley Meck | b****k@g****m | 1 |
| David Sanders | d****1@u****m | 1 |
| Dirk Stolle | s****v@w****e | 1 |
| Dmitry Shirokov | d****k@g****m | 1 |
| Ashley Williams | a****y@g****m | 1 |
| Anthony Chen | p****9@g****m | 1 |
| Andrew Fischer | a****r@s****m | 1 |
| Justin Helmer | j****r@m****m | 1 |
| Сковорода Никита Андреевич | c****x@g****m | 1 |
| user | m****m@a****o | 1 |
| tonghuaroot | t****t@g****m | 1 |
| thefourtheye | t****e | 1 |
| pieh | m****k@g****m | 1 |
| jcesarmobile | j****e@g****m | 1 |
| and 19 more... | ||
Issue and Pull Request metadata
Last synced: 2 days ago
Total issues: 78
Total pull requests: 103
Average time to close issues: 5 months
Average time to close pull requests: about 2 months
Total issue authors: 72
Total pull request authors: 30
Average comments per issue: 2.42
Average comments per pull request: 0.86
Merged pull request: 34
Bot issues: 0
Bot pull requests: 53
Past year issues: 10
Past year pull requests: 10
Past year average time to close issues: about 23 hours
Past year average time to close pull requests: 1 day
Past year issue authors: 9
Past year pull request authors: 8
Past year average comments per issue: 1.9
Past year average comments per pull request: 0.8
Past year merged pull request: 3
Past year bot issues: 0
Past year bot pull requests: 0
Top Issue Authors
- Gudahtt (2)
- aral (2)
- maka-io (2)
- Goodwine (2)
- JamieMagee (2)
- robross0606 (2)
- Stono (1)
- gatleas17 (1)
- fholzer (1)
- linkjay (1)
- 0xE1E10 (1)
- psi-4ward (1)
- igibek (1)
- cherviakovtaskworld (1)
- ZLY201 (1)
Top Pull Request Authors
- dependabot[bot] (51)
- isaacs (8)
- lukekarrys (4)
- serhalp (2)
- benmccann (2)
- Saschaym (2)
- dsanders11 (2)
- striezel (2)
- fabasoad (2)
- shaked-seal (2)
- JamieMagee (2)
- JogoJogo (2)
- github-actions[bot] (2)
- juliangruber (2)
- itchyny (2)
Top Issue Labels
- Bug (8)
- Enhancement (7)
- Needs Triage (4)
- Question (2)
Top Pull Request Labels
- Dependencies (51)
- javascript (2)
- autorelease: tagged (2)
- semver:major (1)
Package metadata
- Total packages: 12
-
Total downloads:
- npm: 324,746,982 last-month
- Total docker downloads: 15,768,112,460
- Total dependent packages: 5,090 (may contain duplicates)
- Total dependent repositories: 3,183,760 (may contain duplicates)
- Total versions: 354
- Total maintainers: 9
- Total advisories: 20
npmjs.org: tar
tar for node
- Homepage: https://github.com/isaacs/node-tar#readme
- Licenses: BlueOak-1.0.0
- Latest release: 7.5.22 (published about 2 months ago)
- Last Synced: 2026-09-14T05:25:15.109Z (2 days ago)
- Versions: 153
- Dependent Packages: 5,040
- Dependent Repositories: 3,179,743
- Downloads: 324,698,566 Last month
- Docker Downloads: 15,768,112,213
-
Rankings:
- Docker downloads count: 0.002%
- Dependent repos count: 0.005%
- Downloads: 0.013%
- Dependent packages count: 0.018%
- Average: 0.84%
- Forks count: 2.469%
- Stargazers count: 2.532%
- Maintainers (1)
-
Advisories:
- node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
- node-tar: Process crash via PAX numeric path type confusion
- node-tar: Decompression/parse DoS via unlimited input
- node-tar: Negative tar entry size causes infinite loop in archive replace
- node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records
- node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
- node-tar Symlink Path Traversal via Drive-Relative Linkpath
- tar has Hardlink Path Traversal via Drive-Relative Linkpath
- Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
- node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
- Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
- node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization
- node-tar has a race condition leading to uninitialized memory exposure
- Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
- Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
- Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
- Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
- Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
- Arbitrary File Overwrite in tar
- Symlink Arbitrary File Overwrite in tar
npmjs.org: tarr
tarr for node
- Homepage: https://github.com/isaacs/node-tar#readme
- Licenses: BSD
- Latest release: 1.1.0 (published over 7 years ago)
- Last Synced: 2026-09-14T04:42:32.815Z (2 days ago)
- Versions: 3
- Dependent Packages: 17
- Dependent Repositories: 3,993
- Downloads: 44,430 Last month
- Docker Downloads: 247
-
Rankings:
- Dependent repos count: 0.377%
- Downloads: 0.772%
- Docker downloads count: 1.051%
- Dependent packages count: 1.38%
- Average: 1.448%
- Forks count: 2.444%
- Stargazers count: 2.665%
- Maintainers (1)
proxy.golang.org: github.com/isaacs/node-tar
- Homepage:
- Documentation: https://pkg.go.dev/github.com/isaacs/node-tar#section-documentation
- Licenses: blueoak-1.0.0
- Latest release: v7.5.22+incompatible (published about 1 month ago)
- Last Synced: 2026-09-14T04:43:00.241Z (2 days ago)
- Versions: 139
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Forks count: 1.969%
- Stargazers count: 2.211%
- Average: 5.912%
- Dependent packages count: 8.899%
- Dependent repos count: 10.567%
npmjs.org: tar-fixed
tar for node
- Homepage: https://github.com/isaacs/node-tar
- Licenses: BSD
- Latest release: 0.1.20 (published about 12 years ago)
- Last Synced: 2026-09-14T04:44:15.206Z (2 days ago)
- Versions: 1
- Dependent Packages: 1
- Dependent Repositories: 17
- Downloads: 76 Last month
-
Rankings:
- Forks count: 2.398%
- Stargazers count: 2.574%
- Dependent repos count: 2.923%
- Downloads: 6.482%
- Average: 7.057%
- Dependent packages count: 20.908%
- Maintainers (1)
npmjs.org: rinh-node-tar
tar for node
- Homepage:
- Licenses: BSD
- Latest release: 0.1.17 (published almost 13 years ago)
- Last Synced: 2026-09-14T04:44:15.802Z (2 days ago)
- Versions: 1
- Dependent Packages: 3
- Dependent Repositories: 5
- Downloads: 35 Last month
-
Rankings:
- Forks count: 2.398%
- Stargazers count: 2.574%
- Dependent repos count: 5.02%
- Dependent packages count: 5.888%
- Average: 10.934%
- Downloads: 38.791%
- Maintainers (1)
npmjs.org: tar-edison
tar for node
- Homepage: https://github.com/isaacs/node-tar
- Licenses: BSD
- Latest release: 0.1.16 (published almost 12 years ago)
- Last Synced: 2026-09-14T04:32:33.334Z (2 days ago)
- Versions: 1
- Dependent Packages: 1
- Dependent Repositories: 2
- Downloads: 19 Last month
-
Rankings:
- Forks count: 2.398%
- Stargazers count: 2.574%
- Dependent repos count: 7.611%
- Average: 16.8%
- Dependent packages count: 20.908%
- Downloads: 50.508%
- Maintainers (1)
repo1.maven.org: org.webjars.npm:tar
WebJar for tar
- Homepage: https://www.webjars.org
- Documentation: https://appdoc.app/artifact/org.webjars.npm/tar/
- Licenses: BlueOak-1.0.0
- Latest release: 7.5.22 (published 10 days ago)
- Last Synced: 2026-09-14T04:31:44.894Z (2 days ago)
- Versions: 22
- Dependent Packages: 28
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 2.485%
- Average: 17.233%
- Dependent repos count: 31.98%
npmjs.org: @depup/tar
tar for node (with updated dependencies)
- Homepage: https://github.com/isaacs/node-tar#readme
- Licenses: BlueOak-1.0.0
- Latest release: 7.5.22-depup.0 (published about 2 months ago)
- Last Synced: 2026-09-14T04:58:57.257Z (2 days ago)
- Versions: 4
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 31 Last month
-
Rankings:
- Dependent repos count: 22.409%
- Average: 27.355%
- Dependent packages count: 32.302%
- Maintainers (1)
npmjs.org: @maka/tar
Patch for tar 6.x
- Homepage: https://github.com/isaacs/node-tar#readme
- Licenses: ISC
- Latest release: 6.2.2 (published over 2 years ago)
- Last Synced: 2026-09-14T04:42:14.781Z (2 days ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 3,556 Last month
-
Rankings:
- Dependent repos count: 30.596%
- Average: 37.198%
- Dependent packages count: 43.801%
- Maintainers (1)
repo1.maven.org: org.mvnpm:tar
tar for node
- Homepage: https://github.com/isaacs/node-tar#readme
- Documentation: https://appdoc.app/artifact/org.mvnpm/tar/
- Licenses: BlueOak-1.0.0
- Latest release: 7.5.22 (published about 2 months ago)
- Last Synced: 2026-09-14T04:31:10.470Z (2 days ago)
- Versions: 26
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 31.969%
- Average: 38.837%
- Dependent packages count: 45.705%
npmjs.org: @xchencode/tar
tar for node
- Homepage: https://github.com/isaacs/node-tar#readme
- Licenses: ISC
- Latest release: 6.2.1 (published over 2 years ago)
- Last Synced: 2026-09-14T04:39:28.283Z (2 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 21 Last month
-
Rankings:
- Dependent repos count: 32.189%
- Average: 39.186%
- Dependent packages count: 46.183%
- Maintainers (1)
npmjs.org: @fengmk2/tar
tar for node
- Homepage: https://github.com/isaacs/node-tar#readme
- Licenses: ISC
- Latest release: 6.2.0 (published over 2 years ago)
- Last Synced: 2026-09-15T00:56:30.783Z (1 day ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 248 Last month
-
Rankings:
- Dependent repos count: 36.053%
- Average: 43.863%
- Dependent packages count: 51.674%
- Maintainers (1)
Dependencies
package.json
npm
- chmodr ^1.2.0 development
- end-of-stream ^1.4.3 development
- eslint ^7.17.0 development
- eslint-plugin-import ^2.22.1 development
- eslint-plugin-node ^11.1.0 development
- eslint-plugin-promise ^4.2.1 development
- eslint-plugin-standard ^5.0.0 development
- events-to-array ^1.1.2 development
- mutate-fs ^2.1.1 development
- rimraf ^2.7.1 development
- tap ^15.0.9 development
- tar-fs ^1.16.3 development
- tar-stream ^1.6.2 development
- chownr ^2.0.0
- fs-minipass ^2.0.0
- minipass ^3.0.0
- minizlib ^2.1.1
- mkdirp ^1.0.3
- yallist ^4.0.0
.github/workflows/ci.yml
actions
- actions/checkout v3 composite
- actions/setup-node v3 composite
package-lock.json
npm
- 361 dependencies
.github/workflows/typedoc.yml
actions
- actions/checkout v6 composite
- actions/configure-pages v5 composite
- actions/deploy-pages v4 composite
- actions/setup-node v6 composite
- actions/upload-pages-artifact v4 composite