
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
git-list-updated
Advanced tools
Resolve list of updated (and existing) files between two branches
By default it checks difference between HEAD
(so current branch) and master
.
Useful when we want to apply certain operations (e.g. lint) only to files that were updated and not whole repostory
npm install -g git-list-updated
List updated files
git-list-updated [-h | --help] [--base=<base>] [--head=<head>] [--ext=<ext>] [<path>]
If <path>
is not provided, check is done in repository at current working directory
base
(defaults to master
)Base branch with which we wish to compare
head
(defaults to HEAD
)Target containing the changes that should be investigated
ext
List only files with specific extensions. Multiple extensions can be chosen by passing arg multiple times. If not passed, all files are listed
Pipe output of git-list-updated into other command. On *nix systems that could simply be achieved via:
git-list-updated [<...git-list-updated-args>] | <targetComand> [<...target-command-args>]
Purpose of this util is to provide cross environment solution that can also work on Windows
pipe-git-updated [<...git-list-updated-args>] -- <targetComand> [<...target-command-args>]
git-list-updated
const gitListUpdated = require("git-list-updated/pipe");
gitListUpdated(respositoryRoot, {
base: "master", // Base to compare against
head: "HEAD" // Source for comparision
ext: [] // Limit output to given extensions
})
// Response object is a stream that emits each filename with individual data event
.on("data", filename => {
console.log(`Updated file: ${filename}`);
})
// Response object is also a promise that resolves with a list of updated files
.then(fileNames => {
console.log(`All updated files: ${fileNames}`);
});
git-list-updated/pipe
const pipeGitUpdated = require("git-list-updated/pipe");
pipeGitUpdated(respositoryRoot, [targetCliCommand, targetCliCommandArg1, targetCliCommandArg2], {
// git-list-updated options
base: "master", // Base to compare against
head: "HEAD" // Source for comparision
// pipe specific optons
stdio: "inherit" // Override stdio setting of targetCli command
});
npm test
FAQs
Resolve list of updated (and existing) files between two branches
The npm package git-list-updated receives a total of 8,060 weekly downloads. As such, git-list-updated popularity was classified as popular.
We found that git-list-updated demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.