
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@rgrove/synchrotron
Advanced tools
Watches a local directory and syncs files to another directory or a remote destination using rsync whenever changes occur.
Watches a local directory and syncs files to another directory or a remote destination using rsync whenever changes occur.
You have some local files. Maybe thousands of them.
When you make local changes, you want those changes to be synced immediately to another location (like a remote development server).
You want this to be fast whether you make a change to one file or to thousands of files, because sometimes you change a lot of things at once, like when you check out another git branch, or run webpack, or do a massive find and replace.
Install Synchrotron globally and view the available options:
npm i -g @rgrove/synchrotron
synchrotron --help
Or, if you prefer, install it locally in a project directory and run it via npm scripts or npx
:
npm i @rgrove/synchrotron
npx @rgrove/synchrotron --help
If you're scared of commitment, you can skip the installation step entirely and let npx
install Synchrotron on demand whenever you use it:
npx @rgrove/synchrotron --help
These examples assume you've installed Synchrotron globally. If you'd prefer to run it via npx
, replace the command synchrotron
with npx @rgrove/synchrotron
.
Sync the current working directory over SSH to the path /data/www
on the server example.com
and then watch for changes:
synchrotron --dest example.com:/data/www
Sync the local directory /Users/kevin
to the local directory /Users/nora
once and then exit without watching for changes:
synchrotron --source /Users/kevin --dest /Users/nora --once
Pretend to sync the current working directory to a remote server and watch for changes, but don't actually sync anything (this is great if you just want to see what would happen):
synchrotron --dest example.com:/data/www --dry-run
See a list of all available options:
synchrotron --help
You can use a .synchrotron-ignore
file to specify file and directory names and patterns that Synchrotron should ignore.
Synchrotron will search for a .synchrotron-ignore
file starting in the source directory, then its parent directory, then its parent's parent, and so on, stopping if it finds one. Or you can specify an ignore file manually with the --ignore-path
option.
This file should contain a newline-separated list of rsync exclude pattern rules. The format is similar to — but not exactly the same as — the format of .gitignore
files.
For example:
# Ignore a file or directory named "dist" no matter where it is in the directory
# hierarchy.
dist
# Ignore any file or directory whose name starts with "."
.*
# Ignore a file or directory named "dist", but only if it's in the root of the
# directory hierarchy.
/dist
# Ignore a file or directory named "dist", but only if it's inside a directory
# named "build" anywhere in the hierarchy.
build/dist
# Ignore a directory named "dist" as well as all of its contents.
dist/***
See the rsync man page for more details.
PRs with bug fixes are welcome!
Please get in touch before adding new features. I'm not likely to accept feature enhancements that I won't personally use since I won't be able to maintain them.
FAQs
Watches a local directory and syncs files to another directory or a remote destination using rsync whenever changes occur.
We found that @rgrove/synchrotron demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.