
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Like node-watch but only run when things change when using git status
npm install git-watch
const gitWatch = require('git-watch')
gitWatch(__dirname, (gitError, fileName, watchEvent, gitStatus) => {
console.log(fileName, watchEvent)
})
gitError is null unless git errors, e.g. not a git repo
fileName is the name of the file which has changed
watchEvent see node-watch but things like change and remove
gitStatus is the response from git status
You can even use this from the command line
git-watch --dir=./ --cmd="npm test --filter=$1"
it replaces $1 with the file which has changed
options
--dir | -d is the directory to watch, defaults to process.cwd()
--cmd | -c is the command to run, will append the file name to the end of the cmd or replaces all $1 with the file which has changed
--help | -h to get some sort of help message
if you don't want to execute then just stick a # on the end e.g. npm test # because # is just a comment right?
FAQs
Like watch but only on files which change using git status
We found that git-watch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.