Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@6degrees/source-code-spitter
Advanced tools
A command-line tool to extract and organize source code snippets from projects, enabling easy sharing and collaboration.
SourceCodeSpitter is a command-line tool that generates a single dump file containing all the source code files within a directory, excluding files specified in .gitignore
and .spitignore
. This tool is useful for quickly collecting source code snippets for sharing or documentation purposes.
.gitignore
and .spitignore
.npm install -g @6degrees/source-code-spitter
# or for local project only
npm install @6degrees/source-code-spitter
spitit [options] [directory]
-c, --clear: Clear the console.
-i, --include <extensions>: Include only specific file types (comma-separated, e.g., .js,.css). Use this option to limit the extraction to certain file extensions.
-e, --exclude <extensions>: Exclude specific file types (comma-separated, e.g., .log,.txt). Use this option to exclude certain file extensions from the extraction.
Replace [directory]
with the path to the directory you want to generate the source code dump for. If no directory is provided, it will default to the current working directory.
The tool will generate a source_code_dump.txt
file in the same directory with all the source code snippets.
spitit .
source-code-spitter /path/to/directory
spitit --include .js,.css
spitit --exclude .log,.txt
Contributions are welcome! Feel free to open an issue or submit a pull request for any improvements or additional features you'd like to see.
This project is licensed under the MIT License.
2.1.1
FAQs
A command-line tool to extract and organize source code snippets from projects, enabling easy sharing and collaboration.
We found that @6degrees/source-code-spitter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.