Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
It is useful for creating a template by git clone. It saved the template to local cached folder to avoid run `git clone` every time creating template. It could significantly improve the speed of installing template.
It is useful for creating a template by git clone. It saved the template to local cached folder to avoid run git clone
every time creating template. It could significantly improve the speed of installing template.
$ npm install git-cache
const path = require('path');
const os = require('os');
const gitCache = require('git-cache');
gitCache({
git: 'pspgbhu/git-cache',
target: 'project',
cacheDir: path.join(os.homedir(), '.git-cache', 'template'),
}).then(() => {
console.log('Generated template success!');
});
gitCache(options)
<string>
The URL of git repository. If this is a github repository, you just input as "<username>/<repo>"
, else must input the whole URL.<string>
Create the template to this folder.<string>
Default: path.join(os.homedir(), '.git-cache', hash)
(same options.git have same hash). The template repository will be cached in this folder.<string>
Default: 'master'
. The branch of the repository.<boolean>
Default: false
. If this value is true
, it would copied files directly to target folder, rather than execute git pull
before copy files. Must pay attenation to that it dependent on the local cached files, if there are not cached files, it will execute git clone
before copy. It currently only work with the situation that options.way
equal to 'git'
<string>
Default: 'git'
. The way of downloading template. The valid value are 'git'
or 'zip'
. 'git'
means by git clone, 'zip'
means by downloading zip and extracting.<string>
If options.way
is 'zip'
, and the value of options.git
is a whole URL, you must input a zip download URL in this property. If options.git
is same as '<username>/<repo>'
, you could ignore this item, and it will automatic generated zip download URL.FAQs
It is useful for creating a template by git clone. It saved the template to local cached folder to avoid run `git clone` every time creating template. It could significantly improve the speed of installing template.
The npm package git-cache receives a total of 2 weekly downloads. As such, git-cache popularity was classified as not popular.
We found that git-cache demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.