
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
@open-tech-world/rollup-plugin-clean
Advanced tools
A rollup plugin to remove files and folders.
With Yarn:
yarn add --dev @open-tech-world/rollup-plugin-clean
With Npm:
npm i --save-dev @open-tech-world/rollup-plugin-clean
// rollup.config.js
import clean from '@open-tech-world/rollup-plugin-clean';
export default {
entry: 'src/index.js',
output: {
file: 'bundle.js',
format: 'cjs'
}
plugins: [
clean('build/**') // Removes all files & folders inside the path.
]
};
A function to delete files and folders in start or end build hooks.
clean(target: string | string[] | { start: target, end: target }, options: { dryRun: boolean })
Props:
| Name | Type | Default | Description |
|---|---|---|---|
| target | String | String[] | { start, end } | undefined | The target paths to remove. The target string matched using glob pattern.The default hook is start when string or string array passed. When an object is passed as target, use start or end prop to specify the target paths to clean. |
| options | Object | undefined | The options to control the behaviour of clean function. See below table for options properties. |
Options:
| Option | Type | Default | Description |
|---|---|---|---|
| dryRun | Boolean | false | Flag to disable clean function and it reports the target paths to be cleaned in the console. |
| silent | Boolean | false | Flag to disable any outputs in the console. Note that it will also disable any warnings in the console. |
MIT © Thanga Ganapathy
FAQs
A rollup plugin to remove files and folders using glob patterns.
The npm package @open-tech-world/rollup-plugin-clean receives a total of 5 weekly downloads. As such, @open-tech-world/rollup-plugin-clean popularity was classified as not popular.
We found that @open-tech-world/rollup-plugin-clean demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.