🕵️‍♀️ careful-download

Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe. A headache-averting wrapper around got, sumchecker, and decompress.

Install

npm install careful-download
# or...
yarn add careful-download

Usage

import downloader from "careful-download";

await downloader(
  "https://github.com/gohugoio/hugo/releases/download/v0.88.1/hugo_extended_0.88.1_Windows-64bit.zip",
  "https://github.com/gohugoio/hugo/releases/download/v0.88.1/hugo_0.88.1_checksums.txt",
  {
    destDir: "./vendor",
    algorithm: "sha256",
    encoding: "binary",
    extract: true,
  },
);
//=> '/Users/jake/src/carefully-downloaded/vendor/hugo.exe'

API

downloader(downloadUrl, checksumUrl, options?)

downloadUrl

Type: string

checksumUrl

Type: string

options

Type: object

filename

Type: string
Default: Extracted from the download URL.

Manually set the filename of the download, helpful if the one provided by the server doesn't match the filename listed in the checksum file.

extract

Type: boolean
Default: false

Use decompress to extract the final download to the destination directory (assuming it's a .zip, .tar, .tar.gz, etc.).

tempDir

Type: string
Default: tempy.directory()

Path to temporary directory for unverified and/or unextracted downloads. Automatically generated if not set (recommended).

destDir

Type: string
Default: "./downloads"

Full path or directory name relative to module to store the validated download.

cleanDestDir

Type: boolean
Default: false

Delete any existing files in the destination directory before downloading.

algorithm

Type: string
Default: "sha256"

The algorithm used by the checksum file. Available options are dependent on the version of OpenSSL on the platform. Examples are 'SHA1', 'SHA256', 'SHA512', 'MD5', etc.

On recent releases of OpenSSL, openssl list -digest-algorithms will display the available digest algorithms. Read more about crypto.createHash().

encoding

Type: string
Default: "binary"

Tell the file stream to read the download as a binary, UTF-8 text file, base64, etc.

License

MIT