I Wrapped ClamAV for Node.js So You Don't Have To

The reason is friction. ClamAV, the de facto open-source antivirus engine, does not have a clean Node.js interface. If you want to scan a file against it, you write infrastructure code: manage a daemon, open a TCP socket, speak the INSTREAM protocol, parse the response, handle reconnection, wrap all of it in error handling. It works, but it's the kind of boilerplate that either never gets written or gets copy-pasted across projects without being maintained.