Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
fs-xattr-building
Advanced tools
Node.js module for manipulating extended attributes.
There are already some libraries for this, why use fs-xattr
?
npm install --save fs-xattr
import { getAttribute, setAttribute } from 'fs-xattr'
await setAttribute('index.js', 'user.linusu.test', 'Hello, World!')
console.log(await getAttribute('index.js', 'user.linusu.test'))
//=> Hello, World!
getAttribute(path, attr)
path
(string
, required)attr
(string
, required)Promise<Buffer>
- a Promise
that will resolve with the value of the attribute.Get extended attribute attr
from file at path
.
getAttributeSync(path, attr)
path
(string
, required)attr
(string
, required)Buffer
Synchronous version of getAttribute
.
setAttribute(path, attr, value)
path
(string
, required)attr
(string
, required)value
(Buffer
or string
, required)Promise<void>
- a Promise
that will resolve when the value has been set.Set extended attribute attr
to value
on file at path
.
setAttributeSync(path, attr, value)
path
(string
, required)attr
(string
, required)value
(Buffer
or string
, required)Synchronous version of setAttribute
.
removeAttribute(path, attr)
path
(string
, required)attr
(string
, required)Promise<void>
- a Promise
that will resolve when the value has been removed.Remove extended attribute attr
on file at path
.
removeAttributeSync(path, attr)
path
(string
, required)attr
(string
, required)Synchronous version of removeAttribute
.
listAttributes(path)
path
(string
, required)Promise<Array<string>>
- a Promise
that will resolve with an array of strings, e.g. ['user.linusu.test', 'com.apple.FinderInfo']
.List all attributes on file at path
.
listAttributesSync(path)
path
(string
, required)Array<string>
Synchronous version of listAttributes
.
For the large majority of Linux filesystem there are currently 4 supported namespaces (user
, trusted
, security
, and system
) you can use. Some other systems, like FreeBSD have only 2 (user
and system
).
Be sure to use a namespace that is appropriate for your supported platforms. You can read more about this in the "Extended File Attributes" Wikipedia article.
Using a namespace like com.linusu.test
would work on macOS, but would give you the following error on Debian Linux:
Error [ENOTSUP]: The file system does not support extended attributes or has the feature disabled.
FAQs
Node.js module for manipulating extended attributes.
The npm package fs-xattr-building receives a total of 0 weekly downloads. As such, fs-xattr-building popularity was classified as not popular.
We found that fs-xattr-building demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.