Lead maintainer of formidable here.
Any particular reason why you're using v1? I don't see anything that requires that version, you're using the pretty standard API - IncomingForm which is pretty old, deprecated and weird one. The v3 has the same stuff, especially if you don't need older Node.
Please upgrade to latest, and prepare for v4 which is written in TypeScript and modern stack & APIs like Fetch/Request/Response/ReadableStream, and there is no buffering or writing to disk. You can try the formidable@next dist-tag.
Trying to ditch people of the v1 for years, yet it has 2 million downloads and many vulnerabilities.
Trying to narrow down from where these 2M are coming from and how much should we care about that version.
I'm seeing you're using it for testing only, but still. Everything except v3 is deprecated and vulnerable.
At least migrate to v3, it still has CJS if that's a must. Tho, the v4 have both CJS & ESM too and work down to Node v14.
Lead maintainer of
formidablehere.Any particular reason why you're using v1? I don't see anything that requires that version, you're using the pretty standard API -
IncomingFormwhich is pretty old, deprecated and weird one. The v3 has the same stuff, especially if you don't need older Node.Please upgrade to latest, and prepare for v4 which is written in TypeScript and modern stack & APIs like Fetch/Request/Response/ReadableStream, and there is no buffering or writing to disk. You can try the
formidable@nextdist-tag.Trying to ditch people of the v1 for years, yet it has 2 million downloads and many vulnerabilities.
Trying to narrow down from where these 2M are coming from and how much should we care about that version.
I'm seeing you're using it for testing only, but still. Everything except v3 is deprecated and vulnerable.
At least migrate to v3, it still has CJS if that's a must. Tho, the v4 have both CJS & ESM too and work down to Node v14.