file-type
22.2.0 · 14 Oct 2026MIT51.4M / weekRepositoryHomepagenpmAtom feed
Upgrading file-type from 18.3.0 to 21.3.1
27 releases in betweennotes for 23
Counted from 23 of 27 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking21.0.0
- breaking21.0.0
- breaking21.0.0
- breaking21.0.0
- breaking21.0.0
- breaking21.0.0
- breaking20.0.0
- breaking20.0.0
- breaking19.0.0
- breaking19.0.0
Security
1 advisory still affects 21.3.1
- file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entrymoderate · GHSA-j47w-4g3g-c36v
Upgrading to 21.3.2 clears it.
Fixes 1 advisory affecting 18.3.0
- file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-headermoderate · GHSA-5v7r-6r5c-r473
Release by release
21.3.1no release note
- new
Add support for Mach-O Universal (aka "Fat") binaries and additional architectures (#779) d223491
- new
- new
Add support for SPSS data files (#787) 889f638
- new
Add support for JMP (#784) 093dba0
- new
21.1.1no release note
- new
Add support for
.tar.gz(gunzipped tarball file) (#763) eda03a7 - new
Add support for Windows registry (.reg) files 0db61ec 7d2ddcf
- new
Add support for Windows registry hive file (
.dat) (#767) f8d62be - fixed
Handle partial unzip (#773) 7ad3a90
- new
- new
Allow options to be directly passed to exported functions (#752) d264029
- new
Add
mpegOffsetToleranceoption (#646) c40840a - fixed
Fix detection of some PAX TAR formats (#762) 574d0d6
- new
- new
Add support Office PowerPoint 2007 (macro-enabled) slide show (#747) f1b4c7a
- new
- new
Add workaround for using
bundleras the module-resolution in TypeScript (#744) 90bfe33
- new
3 other lines we could not sort, mostly version bumps
- 20.1.0
Improve WebP detection (#733) ef486f1
- 19.1.0
Replace Buffer usage with Uint8Array (#633) 00e051bceaf0791ffc1b08b36aee196ccdd95606
- 19.1.0
Please note that fileTypeFromBlob(blob) is streaming the Blob instead of buffering, which require at least Node.js ≥ 20.
1 internal line (docs, tests, tooling) left out.