{"_id":"careful-downloader","_rev":"13-d057c226acd20331e9d42f563c17513e","name":"careful-downloader","dist-tags":{"latest":"3.0.0"},"versions":{"1.0.0":{"name":"careful-downloader","version":"1.0.0","description":"🕵️‍♀️ Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","sumchecker":"^3.0.1","tempy":"^2.0.0","url-parse":"^1.5.3"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","@types/url-parse":"^1.4.4","chai":"^4.3.4","eslint":"^7.32.0","mocha":"^9.1.2"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@1.0.0","dist":{"shasum":"97663659f3550c5f353b52c5c4f44d85e3a24da8","integrity":"sha512-MJ9X+dughlbC2oEwKU4CMkgTTgVp7N+4A2eR4jsoG7mSWyVe28dzZGZt7Bii5lfxKSOI8jyDBL0/c0yxCjURdA==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-1.0.0.tgz","fileCount":6,"unpackedSize":10532,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQDYE9ReJ8dknu4VlmnI72RosLueghyEVwRoce/70E5svQIhAPTErJ/0slcloQqUS9h3GW26gGEuGATEXWNw8nj3X63V"}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_1.0.0_1633529355271_0.9848558280130963"},"_hasShrinkwrap":false},"1.0.1":{"name":"careful-downloader","version":"1.0.1","description":"🕵️‍♀️ Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","sumchecker":"^3.0.1","tempy":"^2.0.0","url-parse":"^1.5.3"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","@types/url-parse":"^1.4.4","chai":"^4.3.4","eslint":"^7.32.0","mocha":"^9.1.2"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@1.0.1","dist":{"shasum":"c13cfddf82e34a68eeda10095471b8bd87259f6c","integrity":"sha512-vOwxDQxt1SWXX1lhJ+oBx4MWI4EYTfv1pSVIrJK6tEuiwRq58WjoVm8aUTF/TFLgk6pZeNzqCGRbdQiaSylJsQ==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-1.0.1.tgz","fileCount":6,"unpackedSize":10532,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIHtd+K+YuvPbXxN8y0o9MwAQGCVnb1PpxJH37Xd/9wlqAiBW4WhxkdNNq2NBA25+v8WuRz44FfTEnUQrFtqZfJV8bA=="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_1.0.1_1633530864619_0.39382520980094604"},"_hasShrinkwrap":false},"1.1.0":{"name":"careful-downloader","version":"1.1.0","description":"🕵️‍♀️ Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","sumchecker":"^3.0.1","tempy":"^2.0.0","url-parse":"^1.5.3"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","@types/url-parse":"^1.4.4","chai":"^4.3.4","eslint":"^7.32.0","mocha":"^9.1.2"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@1.1.0","dist":{"shasum":"c7c64eb55631f55f2512788fa1e4e833c27728fa","integrity":"sha512-BQCb7f7Qa/sR/V2lKn730DV/Li+0WV/LTnHy+x6pIfvZ6WkoG+MnStRkiuJp2reSNe5upBlIWg6iuQiKJgeq1g==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-1.1.0.tgz","fileCount":6,"unpackedSize":10889,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQC0d/n9eiLH0zpJ/qeWaM5xLAA3Z9i5q5lbg2ECWDYZzAIhALEBuJC6IbkiHCCH1RX3zneYY1Un8rOOGcelGmmmBf1z"}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_1.1.0_1633534465112_0.8779405478212139"},"_hasShrinkwrap":false},"1.2.0":{"name":"careful-downloader","version":"1.2.0","description":"🕵️‍♀️ Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","sumchecker":"^3.0.1","tempy":"^2.0.0","url-parse":"^1.5.3"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","@types/url-parse":"^1.4.4","chai":"^4.3.4","eslint":"^7.32.0","mocha":"^9.1.2"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@1.2.0","dist":{"shasum":"9f4e6375860231d47719ac12c5a40e28d6d8b788","integrity":"sha512-erW3AZYO1Ih5qiR+NJKUx9YkItIddshWL9W/Zd10EiGpH60cfj4kgtKyr9mq4dY0QpysMjaezRFNqZa29rxTEw==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-1.2.0.tgz","fileCount":6,"unpackedSize":11038,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIBaQozuh3YQ9IlnXt3xSBvR+apOosigp21tbAdLxmeowAiAffz8/sK+KOB7Y3oEEmML/BY7L56duyJkgr5H2bq8rhg=="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_1.2.0_1633537079190_0.21088287555659857"},"_hasShrinkwrap":false},"1.3.0":{"name":"careful-downloader","version":"1.3.0","description":"🕵️‍♀️ Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","sumchecker":"^3.0.1","tempy":"^2.0.0","url-parse":"^1.5.3"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","@types/url-parse":"^1.4.4","chai":"^4.3.4","eslint":"^7.32.0","mocha":"^9.1.2"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@1.3.0","dist":{"shasum":"8e04bcef656deb877ea915dcfe51447d8ca0f5d5","integrity":"sha512-ayBd5Mkf2fp0xC394Tx1vGr0ETPVLVKq4E5kOukzjCbgv0IaghSraGM6bO5OHeBAnXZuCq9u/9VndmCCXjAnMg==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-1.3.0.tgz","fileCount":6,"unpackedSize":10628,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIGZycv8zBKgUYg6Tpd3moi1+T+E00E1B+3omoMGrOMsUAiBoa1qMhVlvvmHAEGgjS5VGoeiJGUfIYSvA+JQqx5vgJg=="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_1.3.0_1633619643969_0.22164626561309309"},"_hasShrinkwrap":false},"1.3.1":{"name":"careful-downloader","version":"1.3.1","description":"🕵️‍♀️ Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","is-path-in-cwd":"^4.0.0","sumchecker":"^3.0.1","tempy":"^2.0.0","url-parse":"^1.5.3"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","@types/url-parse":"^1.4.4","chai":"^4.3.4","eslint":"^7.32.0","mocha":"^9.1.2"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@1.3.1","dist":{"shasum":"885452db0fdeb0cc4c178d6fc348203a41779de2","integrity":"sha512-22B44PheR54zFdxB9PP1h4yNhZap/3E9bWom8PBxUCGgW93kg8rbjZn4kGjVH9FXsIvgcGrrVq6BYwawmMwz1w==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-1.3.1.tgz","fileCount":6,"unpackedSize":10689,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQDN3cKCOY6iTovxqTbMkXmNuNnTurBI0rz3C0PeFWX6+wIgAKkHxuNa74OxgpDk+Y1L31pGxALUvNOuz4QVBB4hZPg="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_1.3.1_1633649149850_0.5824102875440949"},"_hasShrinkwrap":false},"1.3.2":{"name":"careful-downloader","version":"1.3.2","description":"🕵️‍♀️ Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","is-path-in-cwd":"^4.0.0","sumchecker":"^3.0.1","tempy":"^2.0.0","url-parse":"^1.5.3"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","@types/url-parse":"^1.4.4","chai":"^4.3.4","eslint":"^7.32.0","mocha":"^9.1.2"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@1.3.2","dist":{"shasum":"ef142f302f6bb9d1af54b4550e16467667f3a684","integrity":"sha512-7hLwtEZCz0WwkZBnP1hfZWIYnRgpSR5jan3Pm5QchAgO9e3LJFgOjh+duSF+bWjVdIMKjt69LyAL/l2qQWFYiw==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-1.3.2.tgz","fileCount":6,"unpackedSize":10937,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQDGYlRHBRVC+X2yUKG6OVkciu5OPokg9STtn6ua7Hi2dQIhAOXqqHC3QjdN24JV2XzNaSaUNJpZ79Q9yVCBc7/6xoO3"}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_1.3.2_1633786097909_0.8121301707631436"},"_hasShrinkwrap":false},"1.4.0":{"name":"careful-downloader","version":"1.4.0","description":"🕵️‍♀️ Downloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"debug":"^4.3.2","decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","is-path-in-cwd":"^4.0.0","sumchecker":"^3.0.1","tempy":"^2.0.0","url-parse":"^1.5.3"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","@types/url-parse":"^1.4.4","chai":"^4.3.4","eslint":"^7.32.0","mocha":"^9.1.2"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@1.4.0","dist":{"shasum":"11a8c75c1084d8d703d534012cd076d2dae0f455","integrity":"sha512-JaMSAmHK4KjcZdtH8aja3lezqyMdFI5zR/SH/Ve4VoyFu9ycqe/DOm8gpW3Kfmq5DuSm2utTPN/Pjn+J6P6bIQ==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-1.4.0.tgz","fileCount":6,"unpackedSize":11676,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQDHwlCeRNG/L8f63jjFeUGHPReUUUZjo6mlqR/N6qyseAIgDpDmPs1SiAwyzXGkRqPJDGPRkXrB9Bwi5hZVhTQDS48="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_1.4.0_1633816168961_0.8839240824516139"},"_hasShrinkwrap":false},"2.0.0":{"name":"careful-downloader","version":"2.0.0","description":"🕵️‍♀️ Downloads a file and its checksums, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"debug":"^4.3.2","decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","is-path-inside":"^4.0.0","tempy":"^2.0.0"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","chai":"^4.3.4","eslint":"^8.0.1","mocha":"^9.1.3"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@2.0.0","dist":{"shasum":"c5b8d33a7ecfdd4fbe517ad560aef4dbafb318e2","integrity":"sha512-libX2LU2wkM3Hz8AZf+G4ioEm9jO0qksDHH02ubMyMYEM5i8p+eDFJP2SBsjS9RhKNwB7D2yVyb4PaVjOWzbNw==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-2.0.0.tgz","fileCount":10,"unpackedSize":17325,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIEo66lbxCghwrxYRomsaFtLuDZnw/RuOWF7GMWTogZapAiBL+kiOAxD6GnJ8jR4wI5byo4B28Q+avgppW78/TCDYFQ=="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_2.0.0_1634381902884_0.8540806597060289"},"_hasShrinkwrap":false},"2.0.1":{"name":"careful-downloader","version":"2.0.1","description":"🕵️‍♀️ Downloads a file and its checksums, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"debug":"^4.3.2","decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.2","is-path-inside":"^4.0.0","tempy":"^2.0.0"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","chai":"^4.3.4","eslint":"^8.0.1","mocha":"^9.1.3"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@2.0.1","dist":{"shasum":"2e2ad890108ba881895837f01865de978a9e1b91","integrity":"sha512-nSvCrtMhl3Mtkif2RyOdswyvWQpgPO03fAym/5p0g84YWKf4gpulAjxPwiDfT8BRuoIVRBXUJtVTNnWI2jC0ig==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-2.0.1.tgz","fileCount":10,"unpackedSize":17336,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\n35Kx\r\n=Urta\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQC1oyeflRSKalMA8j+FWxXiD0zD7cQ8bqBY4kNBeKzXLQIgQ0IVBF9HIsUaJhjeTs1l0OUUaCbSXnTfpne8iBnqB5c="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_2.0.1_1634392569293_0.6748125487970882"},"_hasShrinkwrap":false},"2.0.2":{"name":"careful-downloader","version":"2.0.2","description":"🕵️‍♀️ Downloads a file and its checksums, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"debug":"^4.3.3","decompress":"^4.2.1","fs-extra":"^10.0.0","got":"^11.8.3","is-path-inside":"^4.0.0","tempy":"^2.0.0"},"devDependencies":{"@jakejarvis/eslint-config":"github:jakejarvis/eslint-config#main","@types/debug":"^4.1.7","@types/decompress":"^4.2.4","@types/fs-extra":"^9.0.13","chai":"^4.3.6","eslint":"^8.9.0","mocha":"^9.2.0"},"engines":{"node":"^12.20.0 || ^14.13.1 || >=16.0.0"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@2.0.2","dist":{"shasum":"53f879942c715f530ee6ac48a88cd2d07256b085","integrity":"sha512-reL+MmVF5Y+Yzj94Udo63+b9IzdkbxNYfrw620YwBYDtiqRZr5Y9rTrrAndWycAa7yW/JtyV0OYvJlPzqjtSFA==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-2.0.2.tgz","fileCount":10,"unpackedSize":17371,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\nvHWD\r\n=JCGD\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIDiVnulK+uGK2aVewOVjeGvq+9UcQ+gvq8lX8j7X/qSuAiAke7dggXzYooKzwdJezuLXZ0o3Q0h71knr70JWfazLMg=="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_2.0.2_1644677018821_0.9133248860925123"},"_hasShrinkwrap":false},"3.0.0":{"name":"careful-downloader","version":"3.0.0","description":"🕵️‍♀️ Downloads a file and its checksums, validates the hash, and optionally extracts it if safe.","license":"MIT","homepage":"https://github.com/jakejarvis/careful-downloader","author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"type":"module","exports":"./index.js","types":"./index.d.ts","scripts":{"test":"eslint . && mocha"},"dependencies":{"debug":"^4.3.4","decompress":"^4.2.1","fs-extra":"^11.1.1","got":"^12.6.0","is-path-inside":"^4.0.0","tempy":"^3.0.0"},"devDependencies":{"@jakejarvis/eslint-config":"*","@types/debug":"^4.1.8","@types/decompress":"^4.2.4","@types/fs-extra":"^11.0.1","chai":"^4.3.7","eslint":"^8.41.0","mocha":"^10.2.0"},"engines":{"node":">=14.14"},"keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"licenseText":"Copyright (c) 2021 Jake Jarvis\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in\nall copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\nTHE SOFTWARE.\n","_id":"careful-downloader@3.0.0","dist":{"shasum":"7e613e582078e8124e9dab4a2293cd48e6d07e6d","integrity":"sha512-5KMIPa0Yoj+2tY6OK9ewdwcPebp+4XS0dMYvvF9/8fkFEfvnEpWmHWYs9JNcZ7RZUvY/v6oPzLpmmTzSIbroSA==","tarball":"https://registry.npmjs.org/careful-downloader/-/careful-downloader-3.0.0.tgz","fileCount":10,"unpackedSize":17333,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIBvBil/e3U71zV23zekD4rS4TJ7o8YnB287aHKq9GOgiAiAVoH0pQJWrqsWVHh9jXcSONJDznGQ+pAi2XdMv2LZd+A=="}]},"_npmUser":{"name":"jakejarvis","email":"jake@jarv.is"},"directories":{},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/careful-downloader_3.0.0_1685021990460_0.796799086883512"},"_hasShrinkwrap":false}},"time":{"created":"2021-10-06T14:09:15.270Z","1.0.0":"2021-10-06T14:09:15.409Z","modified":"2023-05-25T13:39:50.717Z","1.0.1":"2021-10-06T14:34:24.798Z","1.1.0":"2021-10-06T15:34:25.246Z","1.2.0":"2021-10-06T16:17:59.435Z","1.3.0":"2021-10-07T15:14:04.370Z","1.3.1":"2021-10-07T23:25:50.006Z","1.3.2":"2021-10-09T13:28:18.034Z","1.4.0":"2021-10-09T21:49:29.096Z","2.0.0":"2021-10-16T10:58:23.214Z","2.0.1":"2021-10-16T13:56:09.503Z","2.0.2":"2022-02-12T14:43:38.994Z","3.0.0":"2023-05-25T13:39:50.615Z"},"maintainers":[{"name":"jakejarvis","email":"jake@jarv.is"}],"description":"🕵️‍♀️ Downloads a file and its checksums, validates the hash, and optionally extracts it if safe.","homepage":"https://github.com/jakejarvis/careful-downloader","keywords":["download","extract","checksum","hash","file","http","url","security","backend"],"repository":{"type":"git","url":"https://github.com/jakejarvis/careful-downloader.git"},"author":{"name":"Jake Jarvis","email":"jake@jarv.is","url":"https://jarv.is/"},"license":"MIT","readme":"# 🕵️‍♀️ careful-downloader\n\n[![CI](https://github.com/jakejarvis/careful-downloader/actions/workflows/ci.yml/badge.svg)](https://github.com/jakejarvis/careful-downloader/actions/workflows/ci.yml)\n[![npm](https://img.shields.io/npm/v/careful-downloader?logo=npm)](https://www.npmjs.com/package/careful-downloader)\n[![MIT License](https://img.shields.io/github/license/jakejarvis/careful-downloader?color=red)](LICENSE)\n\nDownloads a file and its checksums to a temporary directory, validates the hash, and optionally extracts it if safe.\n\n## Install\n\n```sh\nnpm install careful-downloader\n# or...\nyarn add careful-downloader\n```\n\n## Usage\n\n```js\nimport downloader from \"careful-downloader\";\n\nawait downloader(\n  \"https://github.com/gohugoio/hugo/releases/download/v0.88.1/hugo_extended_0.88.1_Windows-64bit.zip\",\n  {\n    checksumUrl: \"https://github.com/gohugoio/hugo/releases/download/v0.88.1/hugo_0.88.1_checksums.txt\",\n    destDir: \"vendor\", // relative to process.cwd()\n    algorithm: \"sha256\",\n    extract: true,\n  },\n);\n//=> '/Users/jake/src/carefully-downloaded/vendor/hugo.exe'\n```\n\nInstead of a `checksumUrl`, you can also simply provide a hash as a string via `checksumHash`:\n\n```js\nimport downloader from \"careful-downloader\";\n\nawait downloader(\n  \"https://github.com/gohugoio/hugo/releases/download/v0.88.1/hugo_extended_0.88.1_Windows-64bit.zip\",\n  {\n    checksumHash: \"aaa20e258cd668cff66400d365d73ddc375e44487692d49a5285b56330f6e6b2\",\n    destDir: \"vendor\",\n    algorithm: \"sha256\",\n    extract: false, // the default\n  },\n);\n//=> '/Users/jake/src/carefully-downloaded/vendor/hugo_extended_0.88.1_Windows-64bit.zip'\n```\n\n## API\n\n### downloader(downloadUrl, options)\n\n#### downloadUrl\n\nType: `string`\n\nAbsolute URL to the desired file to download.\n\n#### options\n\nType: `object`\n\n##### checksumUrl\n\nType: `string`\n\nAbsolute URL to a checksums file, usually just a `.txt` containing filenames and hashes [like this](https://github.com/gohugoio/hugo/releases/download/v0.88.1/hugo_0.88.1_checksums.txt):\n\n```plaintext\n27493d1903a41e2dd47edc76a79918d95dfbb31474380d3704322e47ffd11b74  hugo_0.88.1_Windows-32bit.zip\nad81192d188cb584a73074d3dea9350d4609a13ed5fccaafd229b424247e5890  hugo_0.88.1_Windows-64bit.zip\naaa20e258cd668cff66400d365d73ddc375e44487692d49a5285b56330f6e6b2  hugo_extended_0.88.1_Windows-64bit.zip\n```\n\n**Either this option or `checksumHash` is required.**\n\n##### checksumHash\n\nType: `string`\n\nA single hash for the given downloaded file, e.g. `abcd1234abcd1234abcd1234...`.\n\n**Either this option or `checksumUrl` is required.**\n\n##### filename\n\nType: `string`\\\nDefault: Extracted from the download URL.\n\nManually set the filename of the download, helpful if the one provided by the server doesn't match the filename listed in the checksum file.\n\n##### extract\n\nType: `boolean`\\\nDefault: `false`\n\nUse [`decompress`](https://github.com/kevva/decompress) to extract the final download to the destination directory (assuming it's a `.zip`, `.tar`, `.tar.gz`, etc.).\n\n##### destDir\n\nType: `string`\\\nDefault: `\"./downloads\"`\n\nDirectory path relative to module where the validated download is saved or extracted. **Must be located within `process.cwd()` for security reasons.**\n\n##### cleanDestDir\n\nType: `boolean`\\\nDefault: `false`\n\nDelete any existing files in the destination directory before downloading.\n\n##### algorithm\n\nType: `string`\\\nDefault: `\"sha256\"`\n\nThe algorithm used by the checksum file. Available options are dependent on the version of OpenSSL on the platform. Examples are 'SHA1', 'SHA256', 'SHA512', 'MD5', etc.\n\nOn recent releases of OpenSSL, `openssl list -digest-algorithms` will display the available digest algorithms. [Read more about `crypto.createHash()`.](https://nodejs.org/dist/latest-v14.x/docs/api/crypto.html#crypto_crypto_createhash_algorithm_options)\n\n##### encoding\n\nType: `string`\\\nDefault: `\"hex\"`\n\n## License\n\nMIT\n","readmeFilename":"README.md"}