
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
copy-file-util
Advanced tools
Copy or rename a file with optional package version number (CLI tool designed for use in npm package.json scripts)
<img src=https://centerkey.com/graphics/center-key-logo.svg align=right width=200 alt=logo>
Copy or rename a file with optional package version number (CLI tool designed for use in npm package.json scripts)
copy-file-util takes a source file and copies it to a new destination. The command's console output includes a timestamp and formatting helpful in build systems.
<img src=https://raw.githubusercontent.com/center-key/copy-file-util/main/screenshot.png width=800 alt=screenshot>
Install package for node:
$ npm install --save-dev copy-file-util
Run copy-file
from the "scripts"
section of your package.json file.
Parameters:
--folder
flag).Example package.json scripts:
"scripts": {
"pub-license": "copy-file src/LICENSE doc/license.txt",
"backup-license": "copy-file src/LICENSE --folder backup",
},
Example terminal commands:
$ npm install --save-dev copy-file-util
$ copy-file src/web/api.html docs/api-manual.html
You can also install copy-file-util globally (--global
) and then run it anywhere directly from the terminal.
Command-line flags:
Flag | Description | Values |
---|---|---|
--cd | Change working directory before starting copy. | string |
--folder | Indicates the target is a folder. | N/A |
--move | Delete the source file after copying it. | N/A |
--no-overwrite | Abort if target file already exists. | N/A |
--note | Place to add a comment only for humans. | string |
--platform-eol | Save target file with OS dependent line endings. | N/A |
--quiet | Suppress informational messages. | N/A |
Examples:
copy-file app.js app.mjs --quiet
Displays no output.
copy-file app.js --folder dist
Copies app.js into the dist folder.
copy-file 'src/Legal Notice.md' --folder dist
Copies a file that has a space in its filename.
copy-file node_modules/ui-xlib/colors.less --folder src/css --platform-eol
Copies colors.less
into your project and converts the file's EOL characters to \n
for LF
on Unix and \r\n
for CRLF on Windows.
copy-file app.js --move --folder dist
Like the mv
Unix command.
copy-file default-config.json settings/config.json --no-overwrite
Performs a safe copy that aborts if the settings/config.json file already exists.
Note: Single quotes in commands are normalized so they work cross-platform and avoid the errors often encountered on Microsoft Windows.
The target parameter can contain template variables, like {{package.version}}
and {{package.name}}
, which will be replaced with values with values from your project's package.json file.
Example:
copy-file build/app.js dist/app-v{{package.version}}.js
Even though copy-file-util is primarily intended for build scripts, the package can be used programmatically in ESM and TypeScript projects.
Example:
import { copyFile } from 'copy-file-util';
const result = copyFile.cp('src/web/api.html' { targetFile: 'docs/api-manual.html' });
console.log('Execution time:', result.duration, 'ms');
See the TypeScript Declarations at the top of copy-file.ts for documentation.
CLI Build Tools for package.json
Feel free to submit questions at:
github.com/center-key/copy-file-util/issues
FAQs
Copy or rename a file with optional package version number (CLI tool designed for use in npm package.json scripts)
The npm package copy-file-util receives a total of 1,308 weekly downloads. As such, copy-file-util popularity was classified as popular.
We found that copy-file-util demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.