Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
findup-sync
Advanced tools
Find the first file matching a given pattern in the current directory or the nearest ancestor directory.
The findup-sync npm package is used to search for files or directories by name in the file system, starting from a given directory and moving up the directory tree until a match is found or the root is reached. It is particularly useful for finding configuration files or other resources that may be located at various levels of a directory structure.
Find a file or directory by name
This feature allows you to find a file or directory by its name. The function will start searching from the current directory and move up the directory tree until it finds a match or reaches the root.
const findupSync = require('findup-sync');
const path = findupSync('filename.ext');
Use a glob pattern to find files or directories
This feature enables the use of glob patterns to find files or directories. It will return the first match found when searching up the directory tree.
const findupSync = require('findup-sync');
const path = findupSync('*.ext');
Specify a custom starting directory
With this feature, you can specify a custom starting directory from which the search will begin, rather than using the current working directory.
const findupSync = require('findup-sync');
const path = findupSync('filename.ext', { cwd: '/starting/directory' });
The 'glob' package allows for pattern matching based on the rules used by the shell (e.g., bash). It's similar to findup-sync in that it can search for files, but it does not have the built-in functionality to search up the directory tree.
Globby is a wrapper around 'glob' that supports multiple patterns and provides a Promise API. It's similar to findup-sync in terms of searching for files using patterns, but like 'glob', it does not natively support searching up the directory tree.
Locate-path is designed to find a file or directory by walking up parent directories. It's similar to findup-sync but offers a Promise-based API and is more minimalistic.
Find the first file matching a given pattern in the current directory or the nearest ancestor directory.
Matching is done with micromatch, please report any matching related issues on that repository.
var findup = require('findup-sync');
findup(patternOrPatterns [, micromatchOptions]);
// Start looking in the CWD.
var filepath1 = findup('{a,b}*.txt');
// Start looking somewhere else, and ignore case (probably a good idea).
var filepath2 = findup('{a,b}*.txt', {cwd: '/some/path', nocase: true});
findup(patterns, [options])
patterns
{String|Array}: Glob pattern(s) or file path(s) to match against.options
{Object}: Options to pass to micromatch. Note that if you want to start in a different directory than the current working directory, specify a cwd
property here.returns
{String}: Returns the first matching file.MIT
FAQs
Find the first file matching a given pattern in the current directory or the nearest ancestor directory.
The npm package findup-sync receives a total of 5,488,247 weekly downloads. As such, findup-sync popularity was classified as popular.
We found that findup-sync demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.