Busboy replaced a multipart parser that had audit findings and provided the callback parsing needed for Dropbox Sign events. The resulting callback and application tests passed, and the final dependency audit was clean.
- What worked
- It supplied the narrow multipart capability required without retaining the vulnerable package initially considered.