@ayocore/exceljs

Lightweight Node.js-only fork of exceljs for server-side XLSX report generation.

What is this?

A stripped-down, security-hardened fork of ExcelJS optimized for backend use. Read, manipulate and write XLSX spreadsheets on Node.js 20+.

What changed from upstream exceljs?

Removed

• Browser support -- no browser bundles, no polyfills, no UMD wrappers
• CSV support -- workbook.csv removed entirely (fast-csv dependency gone)
• Build step -- no Grunt, no Babel, no Browserify, no esbuild, no terser. Code runs as-is on Node 20+
• readable-stream polyfill -- replaced with native require('stream')
• dayjs -- was unused, removed
• core-js, regenerator-runtime -- not needed on modern Node.js

Upgraded

• archiver 5 -> 7 -- removed deprecated glob@7 and inflight from transitive deps
• unzipper 0.10 -> 0.12 -- removed deprecated fstream and rimraf@2 from transitive deps
• Streaming reader fix -- fixed shared strings race condition when worksheet entries arrive before shared strings in the zip (fixes issue #1328)

Security

Lighter

Runtime dependencies

archiver, jszip, saxes, tmp, unzipper, uuid

Requirements

• Node.js >= 20
• Server-side only. Not for browser use.

Installation

npm install @ayocore/exceljs

Quick start

const ExcelJS = require('@ayocore/exceljs');

// Create a workbook
const wb = new ExcelJS.Workbook();
wb.creator = 'My Server';

// Add a worksheet
const ws = wb.addWorksheet('Report');

ws.columns = [
  {header: 'ID', key: 'id', width: 8},
  {header: 'Name', key: 'name', width: 25},
  {header: 'Amount', key: 'amount', width: 15},
];

ws.getRow(1).font = {bold: true};

ws.addRow({id: 1, name: 'Item A', amount: 100});
ws.addRow({id: 2, name: 'Item B', amount: 250});

ws.getColumn('amount').numFmt = '$#,##0.00';

// Write to file
await wb.xlsx.writeFile('/tmp/report.xlsx');

// Or write to buffer
const buffer = await wb.xlsx.writeBuffer();

Streaming

const ExcelJS = require('@ayocore/exceljs');

// Streaming writer (low memory)
const wb = new ExcelJS.stream.xlsx.WorkbookWriter({
  filename: '/tmp/large-report.xlsx',
});

const ws = wb.addWorksheet('Data');
ws.columns = [{header: 'Row', key: 'row'}];

for (let i = 0; i < 1_000_000; i++) {
  ws.addRow({row: i}).commit();
}

ws.commit();
await wb.commit();

API

The API is the same as exceljs with the following exceptions:

• workbook.csv -- removed (use a dedicated CSV library if needed)
• Browser-specific features -- removed
• ES5/dist builds -- removed

For full API documentation, see the upstream docs.

Ported upstream fixes

This fork includes bug fixes and improvements from open PRs in the original exceljs repository that have not yet been merged upstream.

Bug fixes

Improvements

Thank you to all the original authors for their contributions to the exceljs ecosystem.

License

MIT -- original work by Guyon Roche and exceljs contributors.