
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
@taskr/watch
Advanced tools
Watch files & Execute specified tasks on change
After initializing a Chokidar instance, specified paths will be watched and run Tasks serially in response to adding, updating, or deleting a matching filepath.
When a Task is restarted by task.watch(), the Task's options.src will contain the full path of the file that triggered a response.
$ npm install --save-dev @taskr/watch
module.exports = {
* lint(task, opts) {
// process single file via `opts.src` if populated
yield task.source(opts.src || "src/*.js").eslint()
},
* scripts(task, opts) {
// process single file via `opts.src` if populated
yield task.source(opts.src || "src/*.js").babel({ presets: ["es2015"] }).target("dist/js")
},
* styles(task) {
yield task.source("src/app.sass").sass().target("dist/css")
},
* default(task) {
// watch all JS files; run 'lint' then 'scripts'
yield task.watch("src/**/*.js", ["lint", "scripts"])
// watch multiple paths; only run "styles"
yield task.watch(["src/foo/*.sass", "src/*.sass"], "styles")
}
}
Type: string or array
A filepath, directory path, or glob pattern. Multiple paths must use an array.
Type: string or array
The task(s) to run when a matched file (from globs) is added, changed, or deleted. Multiple tasks must use an array and will run as a serial chain.
Type: object
Default: {}
Initial options to be passed to each Task. See Taskr.start for more info.
Any issues or questions can be sent to the Taskr monorepo.
Please be sure to specify that you are using @taskr/watch.
MIT © Luke Edwards
FAQs
Watch files & Execute specified tasks on change
The npm package @taskr/watch receives a total of 19,552 weekly downloads. As such, @taskr/watch popularity was classified as popular.
We found that @taskr/watch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.