Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
git-list-updated
Advanced tools
Resolve list of updated (and existing) files between two branches
By default it checks difference between HEAD
(so current branch) and master
.
Useful when we want to apply certain operations (e.g. lint) only to files that were updated and not whole repostory
npm install -g git-list-updated
List updated files
git-list-updated [-h | --help] [--base=<base>] [--head=<head>] [--ext=<ext>] [<path>]
If <path>
is not provided, check is done in repository at current working directory
base
(defaults to master
)Base branch with which we wish to compare
head
(defaults to HEAD
)Target containing the changes that should be investigated
ext
List only files with specific extensions. Multiple extensions can be chosen by passing arg multiple times. If not passed, all files are listed
Pipe output of git-list-updated into other command. On *nix systems that could simply be achieved via:
git-list-updated [<...git-list-updated-args>] | <targetComand> [<...target-command-args>]
Purpose of this util is to provide cross environment solution that can also work on Windows
pipe-git-updated [<...git-list-updated-args>] -- <targetComand> [<...target-command-args>]
git-list-updated
const gitListUpdated = require("git-list-updated/pipe");
gitListUpdated(respositoryRoot, {
base: "master", // Base to compare against
head: "HEAD" // Source for comparision
ext: [] // Limit output to given extensions
})
// Response object is a stream that emits each filename with individual data event
.on("data", filename => {
console.log(`Updated file: ${filename}`);
})
// Response object is also a promise that resolves with a list of updated files
.then(fileNames => {
console.log(`All updated files: ${fileNames}`);
});
git-list-updated/pipe
const pipeGitUpdated = require("git-list-updated/pipe");
pipeGitUpdated(respositoryRoot, [targetCliCommand, targetCliCommandArg1, targetCliCommandArg2], {
// git-list-updated options
base: "master", // Base to compare against
head: "HEAD" // Source for comparision
// pipe specific optons
stdio: "inherit" // Override stdio setting of targetCli command
});
npm test
FAQs
Resolve list of updated (and existing) files between two branches
We found that git-list-updated demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.