
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@freik/is-hidden-file
Advanced tools
Check if a file/folder is hidden on node js that works on any platform.
Check if a file/folder is hidden on all platforms.
Forked from kimlimjustin/is-hidden-file to use CMake (reliable!) instead of node-gyp (inscrutably broken constantly for me), with other fixes (like an obvious memory leak)
Note This will slow down your yarn install/npm installs, particularly
on Windows! The speed hit seems unavoidable. Package managers are terrible at
understanding build dependencies, so they'll rebuild this whenever it gets
installed, even if nothing changed. And the rebuild invokes some platform
specific shim which is kind of slow. Once the shim is done, Linux and MacOS move
merrily on their way. Windows, however, invokes the cmake build system, followed
by the C++ compiler & linker, all of which is quite slow. The solution to this
is to get the NodeJS runtime to add support for this to the path or fs
modules... It's gotten bad enough that I'm digging for solutions like including
pre-built x86 and AMD64 binaries in the NPM package...
..npm i is-hidden-fileyarn add is-hidden-fileIt's packaged as both CJS and ESM: Use which module type your ecosystem requires. Typescript types are also included.
import { isHiddenFile } from 'is-hidden-file';
// Or this for CJS:
// const { isHiddenFile } = require('is-hidden-file');
console.log(isHiddenFile('.git')); // true
console.log(isHiddenFile('README.md')); // false
MIT, cuz that's what the original was licensed with.
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.