Dev tools · alternatives · 2026
24 alternatives to Pompelmi
In-process file upload security for Node.js
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
pompelmi▲10Hi HN — I’m the author of pompelmi, an open-source, in-process scanner for untrusted file uploads in Node.js. Motivation: I wanted a practical “upload guard” that reduces common upload risks (ZIP bombs, traversal in archives, MIME spoofing, polyglots/macro hints) without sending files to a cloud AV service (privacy + latency + GDPR concerns). Key points: - Runs in-process (no cloud calls); files never leave your infrastructure - Deep ZIP inspection with configurable limits (depth/entries/ratio) + nested archive scanning - Composable scanners (heuristics + optional signature…
2025 · github.com · its alternatives →
- 2
Postgres.js - The Fastest full featured PostgreSQL client for Node.js, Deno, Bun and CloudFlare - porsager/postgres
2022 · github.com · its alternatives →
- 3
Hi HN! Thanks for your attention to my post. It was a big challenge to run most of Node.js packages in browser, fast moreover. Virtual File system, resolve import/export. I got cold many times, depressions, burned out, yet still alive and finished it. Many guys helped me with an advice. Many users give a lot of positive feedback. There are 200,000 monthly unique users. I work full time now because of the freemium business model. To be honest - I am happy after many years of hard work.
2022 · playcode.io · its alternatives →
- 4
- 5OS
I've been working on this for some time now, starting with vm2, then deno-core for 2 years, and recently rewrote it on rusty_v8 with Claude's help. OpenWorkers lets you run untrusted JS in V8 isolates on your own infrastructure. Same DX as Cloudflare Workers, no vendor lock-in. What works today: fetch, KV, Postgres bindings, S3/R2, cron scheduling, crypto.subtle. Self-hosting is a single docker-compose file + Postgres. Would love feedback on the architecture and what feature you'd want next.
Jan 2026 · openworkers.com · its alternatives →
- 6
- 7
- 8
- 9FI
Sharing files with file.io is convenient, anonymous and secure. Just upload files and share the links via email, SMS, Slack, Discord, etc. Easy-to-use REST API.
2015 · file.io · its alternatives →
- 10
errsole▲133First open-source Node.js logger with a built-in log viewer
2025 · github.com · its alternatives →
- 11
This TypeScript package allows you to safely execute JavaScript code within a WebAssembly sandbox using the QuickJS engine. Perfect for isolating and running untrusted code securely, it leverages the lightweight and fast QuickJS engine compiled to WebAssembly, providing a robust environment for code execution. Features - *Security*: Run untrusted JavaScript code in a safe, isolated environment. - *File System*: Can mount a virtual file system - *Custom Node Modules*: Custom node modules are mountable - *Fetch Client*: Can provide a fetch client to make http(s) calls - *Test-Runner*: Includes…
2024 · github.com · its alternatives →
- 12
✅ Français ✅ Open source ✅ Sécurisé ✅ Gratuit jusqu’à 5 Go de stockage
2013 · cozy.io · its alternatives →
- 13
- 14
High performance secure & portable Rust functions in Node.js
2020 · secondstate.io · its alternatives →
- 15
Transfer files privately, securely and without size limit
2020 · toffeeshare.com · its alternatives →
- 16
Embeddable file uploader for Box, Dropbox, Gdrive, and more
2022 · reactfileupload.com · its alternatives →
- 17
BeamUp▲140Explore BeamUp file uploads with no relay servers and instant S3 delivery. Available in beta
2025 · usebeamup.com · its alternatives →
- 18
This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 19
- 20
Signal protocol implementation for Node.js. Contribute to ForstaLabs/libsignal-node development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 21EA
Hi HN, I'm building ThirdCloud with the goal to replace Google Drive for everyone: more private, cheaper & maybe better UI/UX. So far, I've successfully implemented the main feature, which involves uploading and downloading files. Files are encrypted before being sent to IPFS network. Would like to hear your thoughts on this proof of concept.
2023 · thirdcloud.org · its alternatives →
- 22
ToffeeShare▲72Direct and secure way of transferring files via your browser
2019 · toffeeshare.com · its alternatives →
- 23
- 24SJ
Hey HN, I'm the maintainer of node-cron (5M+ downloads/month), and I recently built Sidequest.js, a background job runner for Node.js inspired by Oban (Elixir) and Sidekiq (Rails). It solves some common problems I saw with libraries like node-cron: - Jobs don’t block your API: they run in isolated worker threads - No Redis or vendor lock-in: use Postgres, MySQL, SQLite, or MongoDB - Supports retries, uniqueness, concurrency, snoozing, prioritization - Comes with a CLI and a simple dashboard - Works great in monoliths and doesn’t require extra infra Quick start (no signup needed):…
2025 · docs.sidequestjs.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →