Formidable is a Node.js module for parsing multipart form data, especially file uploads, with a streaming approach designed to be fast and low-memory. It can write uploaded files to disk and supports upload handling for environments like serverless and cloud storage providers such as AWS S3, Azure, and GCP.
Project status
- Actively maintained, with an upstream GitHub push on 2026-08-06 and a recent version update (v3.5.4 on 2026-04-15).
- Update cadence appears irregular, with a gap of roughly a year between v3.5.3 (2025-04-18) and v3.5.4 (2026-04-15), but ongoing repository activity since then (at least one push in August 2026).
AI summary generated
Recent updates
v3.5.4
v3.5.4 switches the project to pnpm and removes `os.machine` from the CUID2 fingerprint used by `createId`, addressing reported breakage (issue #994, referenced as #995 in the notes). The change also modernizes CI tooling and updates/removes several dev dependency and repository workflow elements.
BreakingSecurityv3.5.3
v3.5.3 mainly updates CI tooling and test workflows, and switches the internal generated filename/id strategy from `hexoid` to `@paralleldrive/cuid2`. The release notes claim the cuid2 change should not be breaking since ids remain 25 characters long.
v3.5.2
Release v3.5.2 (as shown in package.json) introduces significant internal refactors for async control flow and multipart processing correctness, plus new functionality around creating directories from uploaded folder paths. The provided release_notes are empty, so the changes below are inferred directly from the code diff rather than documented notes.
BreakingFeaturesv3.2.5
No publisher-provided release notes were included for v3.2.5. The changelog and code diff indicate this release focuses on a maxFiles behavior change, intended to fail earlier when maxFiles is exceeded.
v3.2.4
Release 3.2.4 has no publisher-provided release notes. The code diff mainly introduces new upload size and file-count enforcement options, changes defaults around empty-file uploads, refactors request pausing/resuming, and tightens filename extension sanitization, with tests added/adjusted to reflect behavior changes.
SecurityFeatures3.1.4
The provided release notes only contain a link to the changelog and do not include the actual text for v3.1.4. From the code diff, v3.1.4 includes at least an error-code addition (pluginFailed) and some refactoring, but the diff also reveals much larger architectural and API changes across the version range.
v1.1.1
v1.1.1 focuses on runtime and compatibility fixes, including improved parsing behavior and corrected Node 7 related buffer handling. It also addresses deprecation warnings and error propagation so developers receive failures more reliably during upload parsing.