
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
Droppel is a command line tool which persists files anywhere you want on your drive using Google Drive or Dropbox. Droppel allows you to have the same file on two or more different machines (or different places on one machine) without the need to have the file reside inside of the Drive or Dropbox folders.
npm install -g droppel
To begin persisting a file, simply do droppel FILE_NAME
To persist a file that has been persisted from another machine, use the same command.
For example, on machine 1, you want to persist myfile.txt: droppel myfile.txt
Then, go to machine 2, and in whatever directory you want: droppel myfile.txt
You have now persisted the same file across two machines and different locations!
You may need to configure droppel to know where your machine's Dropbox or Drive folders are, or to change which service is used. By default, Drive is used.
droppel --config --drive /usr/someone/Google Drive will set the drive location
to /usr/someone/Google drive
droppel --config --service dropbox will set the service to dropbox
droppel --config --directory my-files will place all persisted files inside
the folder "my-files" within your preferred service.
To unlink files, droppel --unlink myfile.txt. This will delete your file!
FAQs
Persist single files or directories wherever you like
We found that droppel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.