
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
for-node-webkit
Advanced tools
Find out if your module or directory is contained in a node-webkit project
or-node-webkit is a tool for detecting if a given directory or package is
contained within a node-webkit project, particularly useful for build time
applications in native modules, where nw-gyp
must be used instead of node-gyp
.
It works by finding the root most package.json from the specified directory, and checking it's engines
property for a node-webkit
property.
##Commandline usage: specify the directory to check against (or-node-webkit will search it's immediate parent and up), or if unspecified, it defaults to the current working directory.
forNodeWebkit "./mydir/someprojectiwanttoknowabout"
forNodeWebkit
The application automatically aliases fnw as well
fnw "./mydir/someprojectiwanttoknowabout"
fnw
##Module usage: The module returns a function that returns a promise, resolving with 2 properties, root and nwVersion.
To find out if the current module resides in a node webkit project:
var fnw = require('for-node-webkit');
fnw(__dirname).then(function(results) {
if (!results.root) {
// Couldnt find a parent module
}
else if (!results.nwVersion) {
// Root module doesnt use node webkit
}
else {
// nwVersion is the version of node webkit
}
});
FAQs
Find out if your module or directory is contained in a node-webkit project
The npm package for-node-webkit receives a total of 1 weekly downloads. As such, for-node-webkit popularity was classified as not popular.
We found that for-node-webkit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.