Pompelmi

Validates files by comparing magic bytes, client-reported MIME types, and extensions against allowlists, effectively preventing common spoofing attacks as highlighted in the key features.

Detects complex threats like ZIP bombs, path traversal, and entry-count abuse in archives, which are often missed by basic file-type checks, reducing risk from malicious uploads.

Provides dedicated middleware and documentation for Express, Next.js, NestJS, and other popular Node.js frameworks, making it easy to drop into existing applications with minimal setup.

Returns clear classifications (clean, suspicious, malicious) that enable applications to implement reject, quarantine, or promote workflows seamlessly, supporting context-aware security decisions.