
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
file-builder
Advanced tools
A file builder ripped from the insides of PrePros
Concatenate files with prepend and append directives embedded in the files as is possible in PrePros and CodeKit. This tool was made to serve the needs of grunt-codekit, but is published in the hopes that it meets the needs of other souls out there.
var builder = require('file-builder')
, fileOptions = {
input: 'starting-point.js',
customOutput: '../results/output.js'
}
, projectOptions = { path: '.' };
builder.javascript(fileOptions, projectOptions, callback);
Assuming we are working with the files in the test/fixtures directory you will end up with test/results/output.js
We are just working directly with the innards of Prepros, so if you want
to know about all the different overrides you can look into the config
module of PrePros.
Use single line comments with @codekit-append or @prepros-append
Example: // @codekit-append 'myfile.js'
See Appending - substitute keywords for @codekit-prepend, @prepros-prepend
javascript(fileOptions, projectOptions, callback)
We are embedding the core of PrePros, so one could do a lot more, but the goal for the first version was to expose the javascript functionality. Feel free to push a PR.
There are some more newlines than what one might expect, but this is how Prepros does this, and so any issues with that should be filed in the Prepros project.
The actual file concatenation logic has been ripped from the insides of PrePros, so thanks to Subash Pratakh for releasing those parts under the MIT license.
File an issue if there are problems. Pull requests are very welcome.
FAQs
A concatenation tool ripped from the insides of PrePros.
We found that file-builder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.