Extract an npm package archive safely into dest.
dest
Entries are validated before extraction: absolute paths, .. traversal, links, devices and FIFOs are rejected, and entry count and total size are bounded. After extraction every path is checked to resolve inside dest.
..
path to the .tgz archive
empty destination directory
absolute path of the package root inside dest
Extract an npm package archive safely into
dest.Entries are validated before extraction: absolute paths,
..traversal, links, devices and FIFOs are rejected, and entry count and total size are bounded. After extraction every path is checked to resolve insidedest.