
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.

Recursively fetches all code files in the current directory, ignoring what's in .gitignore and .boltfetchignore,
then outputs them into a single Markdown file with line numbers.
npx boltfetch -o my-complete-source.md
If -o (or --output) is not provided, it will print to stdout.
You can run directly with npx:
npx boltfetch
Or install globally:
npm install -g boltfetch
boltfetch -o output.md
boltfetch supports two ways to ignore files:
.gitignore - Respects your project's existing .gitignore patterns.boltfetchignore - Additional patterns specific to boltfetchThe .boltfetchignore file works exactly like .gitignore and is useful when you want to ignore files that aren't in your .gitignore. For example:
# .boltfetchignore
*.test.js
docs/
temp/
*.md
Both files support standard gitignore patterns including:
MIT
FAQs
Fetches all files in the current directory and outputs them in a Markdown file.
We found that boltfetch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.