npmjs.org: tar

tar for node

• Homepage: https://github.com/isaacs/node-tar#readme
• Licenses: BlueOak-1.0.0
• Latest release: 7.5.22 (published 1 day ago)
• Last Synced: 2026-07-24T19:30:52.639Z (1 day ago)
• Versions: 153
• Dependent Packages: 5,040
• Dependent Repositories: 3,179,743
• Downloads: 363,537,367 Last month
• Docker Downloads: 15,768,112,213
• Rankings:
  • Docker downloads count: 0.002%
  • Dependent repos count: 0.005%
  • Downloads: 0.013%
  • Dependent packages count: 0.018%
  • Average: 0.84%
  • Forks count: 2.469%
  • Stargazers count: 2.532%
• Maintainers (1)
  • isaacs
• Advisories:
  • node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
  • node-tar: Process crash via PAX numeric path type confusion
  • node-tar: Decompression/parse DoS via unlimited input
  • node-tar: Negative tar entry size causes infinite loop in archive replace
  • node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records
  • node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
  • node-tar Symlink Path Traversal via Drive-Relative Linkpath
  • tar has Hardlink Path Traversal via Drive-Relative Linkpath
  • Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
  • node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
  • Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
  • node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization
  • node-tar has a race condition leading to uninitialized memory exposure
  • Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
  • Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
  • Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
  • Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
  • Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
  • Arbitrary File Overwrite in tar
  • Symlink Arbitrary File Overwrite in tar

npmjs.org: tarr

tarr for node

• Homepage: https://github.com/isaacs/node-tar#readme
• Licenses: BSD
• Latest release: 1.1.0 (published about 7 years ago)
• Last Synced: 2026-07-24T19:30:15.172Z (1 day ago)
• Versions: 3
• Dependent Packages: 17
• Dependent Repositories: 3,993
• Downloads: 56,649 Last month
• Docker Downloads: 247
• Rankings:
  • Dependent repos count: 0.377%
  • Downloads: 0.772%
  • Docker downloads count: 1.051%
  • Dependent packages count: 1.38%
  • Average: 1.448%
  • Forks count: 2.444%
  • Stargazers count: 2.665%
• Maintainers (1)
  • sintaxi

proxy.golang.org: github.com/isaacs/node-tar

• Homepage:
• Documentation: https://pkg.go.dev/github.com/isaacs/node-tar#section-documentation
• Licenses: blueoak-1.0.0
• Latest release: v7.0.0+incompatible (published over 2 years ago)
• Last Synced: 2026-05-14T22:01:47.925Z (2 months ago)
• Versions: 115
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Forks count: 1.969%
  • Stargazers count: 2.211%
  • Average: 5.912%
  • Dependent packages count: 8.899%
  • Dependent repos count: 10.567%

npmjs.org: tar-fixed

tar for node

• Homepage: https://github.com/isaacs/node-tar
• Licenses: BSD
• Latest release: 0.1.20 (published about 12 years ago)
• Last Synced: 2026-07-24T17:26:56.343Z (1 day ago)
• Versions: 1
• Dependent Packages: 1
• Dependent Repositories: 17
• Downloads: 87 Last month
• Rankings:
  • Forks count: 2.398%
  • Stargazers count: 2.574%
  • Dependent repos count: 2.923%
  • Downloads: 6.482%
  • Average: 7.057%
  • Dependent packages count: 20.908%
• Maintainers (1)
  • 26medias

npmjs.org: rinh-node-tar

tar for node

• Homepage:
• Licenses: BSD
• Latest release: 0.1.17 (published over 12 years ago)
• Last Synced: 2026-07-24T17:26:56.167Z (1 day ago)
• Versions: 1
• Dependent Packages: 3
• Dependent Repositories: 5
• Downloads: 18 Last month
• Rankings:
  • Forks count: 2.398%
  • Stargazers count: 2.574%
  • Dependent repos count: 5.02%
  • Dependent packages count: 5.888%
  • Average: 10.934%
  • Downloads: 38.791%
• Maintainers (1)
  • rinh

npmjs.org: tar-edison

tar for node

• Homepage: https://github.com/isaacs/node-tar
• Licenses: BSD
• Latest release: 0.1.16 (published over 11 years ago)
• Last Synced: 2026-07-24T17:26:56.838Z (1 day ago)
• Versions: 1
• Dependent Packages: 1
• Dependent Repositories: 2
• Downloads: 7 Last month
• Rankings:
  • Forks count: 2.398%
  • Stargazers count: 2.574%
  • Dependent repos count: 7.611%
  • Average: 16.8%
  • Dependent packages count: 20.908%
  • Downloads: 50.508%
• Maintainers (1)
  • adammagaluk

repo1.maven.org: org.webjars.npm:tar

WebJar for tar

• Homepage: https://www.webjars.org
• Documentation: https://appdoc.app/artifact/org.webjars.npm/tar/
• Licenses: ISC
• Latest release: 7.4.3 (published over 1 year ago)
• Last Synced: 2026-07-24T17:26:55.861Z (1 day ago)
• Versions: 21
• Dependent Packages: 28
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 2.485%
  • Average: 17.233%
  • Dependent repos count: 31.98%

npmjs.org: @depup/tar

tar for node (with updated dependencies)

• Homepage: https://github.com/isaacs/node-tar#readme
• Licenses: BlueOak-1.0.0
• Latest release: 7.5.13-depup.0 (published 4 months ago)
• Last Synced: 2026-07-24T17:26:56.414Z (1 day ago)
• Versions: 3
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 45 Last month
• Rankings:
  • Dependent repos count: 22.409%
  • Average: 27.355%
  • Dependent packages count: 32.302%
• Maintainers (1)
  • chiefmikey

npmjs.org: @maka/tar

Patch for tar 6.x

• Homepage: https://github.com/isaacs/node-tar#readme
• Licenses: ISC
• Latest release: 6.2.2 (published over 2 years ago)
• Last Synced: 2026-07-24T17:26:56.489Z (1 day ago)
• Versions: 2
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 27 Last month
• Rankings:
  • Dependent repos count: 30.596%
  • Average: 37.198%
  • Dependent packages count: 43.801%
• Maintainers (1)
  • maka

repo1.maven.org: org.mvnpm:tar

tar for node

• Homepage: https://github.com/isaacs/node-tar#readme
• Documentation: https://appdoc.app/artifact/org.mvnpm/tar/
• Licenses: BlueOak-1.0.0
• Latest release: 7.5.21 (published 4 days ago)
• Last Synced: 2026-07-24T17:26:55.790Z (1 day ago)
• Versions: 25
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent repos count: 31.969%
  • Average: 38.837%
  • Dependent packages count: 45.705%

npmjs.org: @xchencode/tar

tar for node

• Homepage: https://github.com/isaacs/node-tar#readme
• Licenses: ISC
• Latest release: 6.2.1 (published over 2 years ago)
• Last Synced: 2026-07-24T17:26:56.291Z (1 day ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 14 Last month
• Rankings:
  • Dependent repos count: 32.189%
  • Average: 39.186%
  • Dependent packages count: 46.183%
• Maintainers (1)
  • xchencode

npmjs.org: @fengmk2/tar

tar for node

• Homepage: https://github.com/isaacs/node-tar#readme
• Licenses: ISC
• Latest release: 6.2.0 (published over 2 years ago)
• Last Synced: 2026-07-24T17:26:56.580Z (1 day ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 133 Last month
• Rankings:
  • Dependent repos count: 36.053%
  • Average: 43.863%
  • Dependent packages count: 51.674%
• Maintainers (1)
  • fengmk2