Automated, zero-config ClamAV scanning for Node.js file uploads.
Product memo
Node.js developers and serverless functions use pompelmi for automated antivirus scanning of file uploads. It wraps ClamAV, handling installation and updates automatically across Node.js, Bun, Deno, and Workers environments. This approach removes the friction of integrating traditional antivirus, providing a simple, typed output for scan verdicts.
For who
Node.js developers and serverless functions
Solves what
Automated, zero-config antivirus scanning for file uploads in Node.js environments.
- Node.js ClamAV wrapper
- Automatic ClamAV installation
- Typed verdict output
In their own words
pompelmi
Node.js antivirus scanning via ClamAV — simple, cross-platform, zero config
Scan file uploads for malware in Node.js, Bun, Deno, and Cloudflare Workers with a single function call. Zero dependencies. Works with Express, Fastify, NestJS, Next.js, Hono, Remix, SvelteKit, and any other framework.
Commercial cues
Model
free only
Free tier
Yes
Trial
No
Pricing Strategy
Pompelmi is a free, open-source utility, offering its full feature set without any paid tiers or monetization.
- • Offers a completely free product, driving broad community adoption.
- • Leverages external ClamAV installation, simplifying its own product scope.
- • Focuses on pure utility without paid tiers, removing upgrade friction.
Operator context
Team
Indie / lean
Founded
Aug 2025
Platform
API
Audience
Developers
Builder Strategy
- Strategy Type
- Niche Specialist
- Stage
- Bootstrapped Lean
- Effort
- Solo Buildable
About pomelmi 0.14.0 Expand
Pompelmi provides a direct option for Node.js developers needing to scan file uploads for malware. It acts as a wrapper for ClamAV, automating its installation and updates across various JavaScript runtimes like Node.js, Bun, Deno, and Cloudflare Workers.
This utility removes the common integration challenges developers face when adding security features, offering a simple function call and clear, typed verdicts (Clean, Malicious, ScanError). Its zero-dependency design ensures it works directly with popular frameworks such as Express, Fastify, NestJS, Next.js, Hono, Remix, and SvelteKit, making it a go-to for specific, hassle-free antivirus scanning.