nowfound

Dev tools · August 30, 2025

pompelmi

Hi HN — I’m the author of pompelmi, an open-source, in-process scanner for untrusted file uploads in Node.js. Motivation: I wanted a practical “upload guard” that reduces common upload risks (ZIP bombs, traversal in archives, MIME spoofing, polyglots/macro hints) without sending files to a cloud AV service (privacy + latency + GDPR concerns). Key points: - Runs in-process (no cloud calls); files never leave your infrastructure - Deep ZIP inspection with configurable limits (depth/entries/ratio) + nested archive scanning - Composable scanners (heuristics + optional signature…

pompelmi launched on August 30, 2025 with 10 votes, #1,987 of 8,530 launches that month and more than 50% of that year's launches. The site was still online in September 2026, 1 year on.

Visit github.com ↗pompelmi alternativestop 23% of August 2025

What it does

free, open-source file scanner

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd. - pompelmi/pompelmi

In the maker’s words, at launch

Hi HN — I’m the author of pompelmi, an open-source, in-process scanner for untrusted file uploads in Node.js. Motivation: I wanted a practical “upload guard” that reduces common upload risks (ZIP bombs, traversal in archives, MIME spoofing, polyglots/macro hints) without sending files to a cloud AV service…

Does a similar job

all alternatives →
  • PompelmiMar 2026 · pompelmi.app · ▲1

    In-process file upload security for Node.js

  • errsole2025 · github.com · ▲133

    First open-source Node.js logger with a built-in log viewer

  • Fast, native Mac file manager (filters, fuzzy find, 9 MB, no Electron)Jul 2026 · whimfiles.com · ▲98

    My Downloads folder had been left unkept for a really long time and cleaning it up using Finder was quite cumbersome. So I started creating a simple app to help me filter out and delete or move the files in the folder. It started out very basic and the filtering options genuinely helped me clean out the Downloads folder, then as I thought of more features I would like to see in a file manager I started to add them. Some of the features are: - Fuzzy go to folder/file where you only need to write a few letters of a full path, get suggestions and can jump to the correct path instantly -…

  • I just open sourced Muxamp, a streaming media playlist in Node.js2013 · github.com · ▲32

    Hey HN! I've been working on Muxamp for over a year now, and I decided that there's no point in keeping the source closed. (I never planned on making money from it.) I've learned a lot since I started, and I hope others can benefit from its release--and perhaps teach me a thing or two as well :)

  • Playback – Interactive Programming and Print Debugging Reimagined2023 · github.com · ▲14

    Ladies and gentlemen of a Lisp persuasion, Clojurians and Clojuristas, followers of the paren and everyone else covetously eyeing the greener grass, I made an open-source thing that I would like to share with you. My elevator pitch is that it'll make you forget all about regular print debugging in 10 minutes straight. The slightly longer pitch is this: #>(tag'n'trace any Clojure(-Script) form to `tap>` and Portal with automatic last-input function replay on eval, instant re-render and hassle-free insertion of traced data into the REPL) And before I end up pasting half the README here in bits…

  • ProKZee – An Open-Source Network Security Tool Written in Go2025 · github.com · ▲7

    Hi HN! After several months of work, I'm excited to share ProKZee, a free and open-source network security tool built with Go and React using Wails framework. ProKZee allows developers, security researchers, and penetration testers to intercept, inspect, and modify HTTP/S traffic — similar to tools like Burp Suite, OWASP ZAP, and Caido — but with a fast native UI, modern UX, and some unique features. https://github.com/al-sultani/prokzee

More dev tools this month

the category →
  • Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

    Dev tools · 1d ago · github.com

  • /dev/null▲492

    a social network for devs

    Dev tools · 4d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 29d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 27d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 24d ago · openbot.run

  • Talanoa▲346

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 22d ago · talanoa.email

Source: Product Hunt launch ↗ · launch text quoted in part

Launched alongside, August 2025

the whole month →
  • Trace▲1,555

    Workflow Automations for the Human 👾 AI Workforce

    AI · 2025 · trace.so

  • I built the world's most impractical 1000-pixel display and anyone in the world can draw on it. It draws a single pixel at a time and takes 30-60 minutes to complete a single image. Anyone can participate in the project by voting for the next image to be drawn, and submitting images. https://kilopx.com/

    Work · 2025 · benholmen.com

  • Job boards are dead. Your network is alive

    AI · 2025 · contra.com

  • Kitten TTS is an open-source series of tiny and expressive text-to-speech models for on-device applications. We are excited to launch a preview of our smallest model, which is less than 25 MB. This model has 15M parameters. This release supports English text-to-speech applications in eight voices: four male and four female. The model is quantized to int8 + fp16, and it uses onnx for runtime. The model is designed to run literally anywhere eg. raspberry pi, low-end smartphones, wearables, browsers etc. No GPU required! We're releasing this to give early users a sense of the latency and voices…

    AI · 2025 · github.com

  • I was wondering how I can arrange objects along a spherical helix path, and read some articles on it. I ended up learning about parametric equations again, and make this visualization to document what I learned: https://visualrambling.space/moving-objects-in-3d/ feel free to visit and let me know what you think!

    Life & fun · 2025 · visualrambling.space

  • For HTML Day 2025 [1], I made a web service that displays the current sky at your approximate location as a CSS gradient. Colours are simulated on-demand using atmospheric absorption and scattering coefficients. Updates every minute, without the use of client-side JavaScript. Source code and additional information is available on GitHub: https://github.com/dnlzro/horizon [1] https://html.energy/html-day/2025/index.html

    Dev tools · 2025 · sky.dlazaro.ca