Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@withtypes/fs-extra
Advanced tools
FS-Extra with types.
Merged fs-extra and @types/fs-extra , install this package to get both, no other features.
I got tired of having to install an additional @types/**
package every time in my TypeScript project to support type inference for these utilities.
So I merged them, but in fact, after installing this package, the original package will still be installed implicitly, and all functions are provided by the original package.
Install the package from npm (or yarn, or pnpm).
# Just install this package
npm i @withtypes/fs-extra
This replaces the original problem of needing to install twice:
# No need to install this now
npm i fs-extra
npm i -D @types/fs-extra
This package does not have its own function implementation, Just replace the package name in the import
statement.
-import fs from 'fs-extra'
+import fs from '@withtypes/fs-extra'
This package also supports named imports:
-import { readFileSync } from 'fs-extra'
+import { readFileSync } from '@withtypes/fs-extra'
So it is exactly the same APIs as the original package in use.
import { resolve } from 'path'
import { readJSONSync } from '@withtypes/fs-extra'
const pkg = resolve('./package.json')
const { version } = readJSONSync(pkg, 'utf-8')
console.log(version)
// 0.1.0
See: Documentation of FS-Extra
MIT License © 2022 chengpeiquan
FAQs
FS-Extra with types.
The npm package @withtypes/fs-extra receives a total of 9 weekly downloads. As such, @withtypes/fs-extra popularity was classified as not popular.
We found that @withtypes/fs-extra demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.