js wrapper for ClamAV designed to provide antivirus scanning for file uploads in JavaScript environments. It enables developers to scan files for malware with a single function call, returning a typed verdict that indicates whether a file is clean, malicious, or if a scan error occurred. js, Hono, Remix, and SvelteKit.
This tool operates without any runtime dependencies, relying solely on Node's built-in child_process module for subprocess handling. It does not require a daemon or background process, instead using the clamscan command directly to perform scans. pompelmi automatically checks for the presence of ClamAV and its virus database before initiating installation or updates, minimizing manual setup steps. ScanError—are Symbol constants, helping to prevent typos and ensuring type safety at compile time.
pompelmi is cross-platform, functioning on macOS, Linux, and Windows systems wherever ClamAV is available. js version 14 or higher and ClamAV to be installed on the host system. The package is distributed via npm and is open source under the ISC license. Documentation is provided for installation, usage, architecture, and error handling, and there are resources for running ClamAV in a Docker container. The project is available on GitHub, where users can report bugs and contribute.
As an open-source security platform component, pompelmi addresses the need for malware scanning in file upload workflows within JavaScript applications, offering a straightforward and dependency-free integration with ClamAV.
pompelmi is a Security & compliance platforms product. It focuses on adding antivirus scanning to Node.js applications for secure file uploads. pompelmi is an open-source project aimed at node.js developers. The project is open source (ISC). It runs on the command line and API.
pompelmi first shipped in 2026. The project is developed in the open on GitHub with 651 stars and 91 commits in the last 90 days. Across PulseGate's embedding index, pompelmi has few near neighbours, marking it as relatively distinct. Among its 5 catalogued features are clamAV integration, typed verdicts, and zero dependencies. It exposes integrations via a public API.
Latest indexed changes and source events
Other apps tracked under the same category.
