Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
extract-path
Advanced tools
Extract a valid fs path from a string.
extract-path is a node library that will attempt to find a possible valid file system path for a given input, validate its existance within the file system and return the matching value upon confirmation.
The main use case for the lib is to be able to take valid path values out of verbose outputs such as those generated by a git status
command:
modified: src/Router.js
resolves to src/Router.js
?? src/utils/__tests__/file.test.js
resolves to src/utils/__tests__/file.test.js
This library was primarily put together for usage in iPipeTo which allows for its users to easily extract a path out of a random input value. Some extra effort was made to ensure extract-path works well as a separated lib in the hope that it can be useful for different use cases out there. Feel free to refer to iPipeTo source code as a implementation example if ever needed.
npm install extract-path
// example.js
const extractPath = require('extract-path');
extractPath('Selected file: ~/Documents/foo.js ...')
.then(path => {
console.log(path);
// ~/Documents/foo.js
});
The API only exposes a single function, that receives a string
and returns a Promise
which resolves with a single, valid string
value or undefined
if there was no possible match.
string
value to be parsed in order to extract a valid fs pathobject
containing the following:
boolean
wether the module should validate the file exists, defaults to true
boolean
uses a fallback system that matches the entire input if a path couldn't be infered from the input, defaults to true
extract-path is heavily inspired by the work done in PathPicker parsing algorithm and regular expressions.
iPipeTo - Interactive Pipe To: The missing cli interactive workflow
Please do! This is an open source project. If you have a bug or want to discuss something, open an issue.
MIT © 2018 Ruy Adorno
FAQs
Extract a valid fs path from a string
The npm package extract-path receives a total of 5,263 weekly downloads. As such, extract-path popularity was classified as popular.
We found that extract-path demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.