Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
github-files-fetcher
Advanced tools
The github-files-fetcher
is mainly designed for downloading part file(s) from a github repository. This is very useful if you have a low bandwidth network and/or just need particular file(s) or subdirectory from a large repository. While you want to download the whole repository, the git clone
command is preferred.
Run npm install -g github-files-fetcher
fetcher --url=resource_url --out=output_directory
For example:
fetcher --url="https://github.com/Gyumeijie/github-files-fetcher/blob/master/CHANGELOG.md" --out=/tmp
The default unauthorized API access rate is 60 times per hour, and usually this is enough. When the access rate exceeded, you can still achieve higher access rate by authentication, which can be done in the following three ways:
This option take the form of --auth=username:password
, where the password can be either the login password for your github account or the personal access token which can be generated in https://github.com/settings/tokens.
The default configuration file is ~/.download_github
, and the config file is a json file.
For example, you can have the ~/config.json
be the configuration file.
# download a directory
fetcher --file="~/config.json" --url="https://github.com/reduxjs/redux/tree/master/examples/async" --out="~/"
# download a single file
fetcher --file="~/config.json" --url="https://github.com/Gyumeijie/github-files-fetcher/blob/master/index.js" --out="~/"
The following is the template of the configuration file:
{
"auth": {
"username" : "your_github_name",
"password" : "password_or_api_access_token"
},
"alwaysUseAuth" : true,
"timeout" : 5000
}
When the default unauthorized API access rate exceeded, the github-files-fetcher
will automatically switch to use authentication if one is provided through the three ways above.
Since the github-files-fetcher
request resource without authentication in default for performance consideration, and switch to use authentication if necessary, this causes unnecessary cost once the default unauthorized API access rate exceeded. To avoid this problem you can have the github-files-fetcher
always use authentication by specify --alwaysUseAuth
option.
node >= 6
There are some other good tools that can do the same thing for you:
FAQs
download files from github repository
The npm package github-files-fetcher receives a total of 243 weekly downloads. As such, github-files-fetcher popularity was classified as not popular.
We found that github-files-fetcher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.