Packages

file-type

22.2.0 · 14 Oct 2026MIT51.4M / weekRepositoryHomepagenpmAtom feed

Upgrading file-type from 15.0.0 to 22.2.0

63 releases in betweennotes for 37

Other targets from 15.0.0Newest 15.x15.0.1Clears its 2 advisories21.3.1
21+
changes to make
2
advisories fixed
61+
new
11+
fixes

Counted from 37 of 63 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking22.0.0
  • breaking22.0.0
  • breaking22.0.0
  • breaking22.0.0
  • breaking22.0.0
  • breaking21.0.0
  • breaking21.0.0
  • breaking21.0.0
  • breaking21.0.0
  • breaking21.0.0

Security

Fixes 2 advisories affecting 15.0.0

  • Fix ZIP bomb in known-size ZIP probing (GHSA-j47w-4g3g-c36v) a155cd7

    21.3.2

Release by release

  1. 22.2.0

    14 Oct 20262 new
    • new

      Add support for Core Audio Format (CAF) (#805) bde605a

    • new

      Add support for DSDIFF (#804) e49d5b7

  2. 22.1.1no release note

  3. 22.1.0

    11 Sep 20261 new
    • new

      Add support for ISO 9660 (.iso) (#796) a675457

  4. 22.0.1 – 22.0.22 releases, no release note

  5. 22.0.0

    26 Mar 20261 new · 1 fix
    • new

      Added detection for Apple iWork files: .key (Keynote), .pages (Pages), .numbers (Numbers)

    • fixed

      Fixed LibreOffice OOXML files being incorrectly detected as ZIP when reading from streams

  6. 21.3.3 – 21.3.42 releases, nothing new or fixed in the notes

  7. 21.3.2

    13 Mar 20261 fix
    • fixed

      Fix bound recursive BOM and ID3 detection 370ed91

  8. 21.3.1no release note

8 other lines we could not sort, mostly version bumps

  • Suppress Vite and webpack warnings for the intentional runtime import 2da7522

    22.1.0

  • Harden parser more aec20a0

    21.3.4

  • Harden parser c48c90b 135f91b

    21.3.3

  • Improve WebP detection (#733) ef486f1

    20.1.0

  • Replace Buffer usage with Uint8Array (#633) 00e051bceaf0791ffc1b08b36aee196ccdd95606

    19.1.0

  • Please note that fileTypeFromBlob(blob) is streaming the Blob instead of buffering, which require at least Node.js ≥ 20.

    19.1.0

  • Remove ASAR 240 bytes of JSON payload length limitation (#453) 07101ac

    16.5.0

  • Remove an unnecessary dependency (#458) 3df0ed1

    16.5.0

2 internal lines (docs, tests, tooling) left out.