Skip to content

docs: add pompelmi to additional middleware modules#2227

Closed
SonoTommy wants to merge 1 commit intoexpressjs:gh-pagesfrom
SonoTommy:patch-1
Closed

docs: add pompelmi to additional middleware modules#2227
SonoTommy wants to merge 1 commit intoexpressjs:gh-pagesfrom
SonoTommy:patch-1

Conversation

@SonoTommy
Copy link
Copy Markdown

Summary

This PR adds pompelmi to the “Additional middleware modules” section in en/resources/middleware.md.

Pompelmi is an open-source file upload security toolkit for Node.js with Express support. It helps inspect uploaded files before storage with checks such as malware scanning hooks, MIME spoofing detection, and risky archive inspection.

Why this fits this page

  • It is directly relevant to Express middleware usage around multipart/form-data and file uploads.
  • It addresses a practical security concern at the middleware layer: validating and scanning untrusted uploads before they are stored or processed.
  • The project already documents Express usage and provides an Express adapter for this workflow.

Scope

  • docs only
  • one new entry in the third-party middleware list
  • no changes to Express core or official Express-maintained middleware

Developer's Certificate of Origin 1.1

By making a contribution to this project, I certify that:

(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or

(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or

(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.

(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.

Signed-off-by: Tommaso Bertocchi <148005572+SonoTommy@users.noreply.github.com>
@SonoTommy SonoTommy requested a review from a team as a code owner March 30, 2026 12:26
Copilot AI review requested due to automatic review settings March 30, 2026 12:26
@netlify
Copy link
Copy Markdown

netlify bot commented Mar 30, 2026

Deploy Preview for expressjscom-preview ready!

Name Link
🔨 Latest commit bff2db2
🔍 Latest deploy log https://app.netlify.com/projects/expressjscom-preview/deploys/69ca6bfffc9fba000973e8a7
😎 Deploy Preview https://deploy-preview-2227--expressjscom-preview.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 97 (no change from production)
Accessibility: 87 (no change from production)
Best Practices: 100 (no change from production)
SEO: 94 (no change from production)
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds the pompelmi project to the community-maintained “Additional middleware modules” list in the Express documentation, expanding the set of third-party middleware options (specifically for securing file uploads).

Changes:

  • Added a new table entry linking to pompelmi/pompelmi.
  • Included a short description highlighting upload security checks (malware hooks, MIME spoofing detection, risky archive inspection).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copy link
Copy Markdown
Member

@bjohansebas bjohansebas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, but for now we’re not accepting any additional middlewares beyond those maintained by Express and the third-party ones we already include. In the future, I’d like to reevaluate the process for including third-party middlewares, but we’re currently in the middle of a redesign, so it’s not something we can focus on right now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants