docs: add pompelmi to additional middleware modules#2227
docs: add pompelmi to additional middleware modules#2227SonoTommy wants to merge 1 commit intoexpressjs:gh-pagesfrom
Conversation
Signed-off-by: Tommaso Bertocchi <148005572+SonoTommy@users.noreply.github.com>
✅ Deploy Preview for expressjscom-preview ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
Pull request overview
Adds the pompelmi project to the community-maintained “Additional middleware modules” list in the Express documentation, expanding the set of third-party middleware options (specifically for securing file uploads).
Changes:
- Added a new table entry linking to
pompelmi/pompelmi. - Included a short description highlighting upload security checks (malware hooks, MIME spoofing detection, risky archive inspection).
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
bjohansebas
left a comment
There was a problem hiding this comment.
Thanks, but for now we’re not accepting any additional middlewares beyond those maintained by Express and the third-party ones we already include. In the future, I’d like to reevaluate the process for including third-party middlewares, but we’re currently in the middle of a redesign, so it’s not something we can focus on right now.

Summary
This PR adds pompelmi to the “Additional middleware modules” section in
en/resources/middleware.md.Pompelmi is an open-source file upload security toolkit for Node.js with Express support. It helps inspect uploaded files before storage with checks such as malware scanning hooks, MIME spoofing detection, and risky archive inspection.
Why this fits this page
multipart/form-dataand file uploads.Scope
Developer's Certificate of Origin 1.1
By making a contribution to this project, I certify that:
(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or
(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or
(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.
(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.