
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
grunt-watch-nospawn
Advanced tools
Run predefined tasks whenever watched file patterns are added, changed or deleted.
The Grunt 0.4 release was a major release. One of its plugins, grunt-contrib-watch, was updated for that release but incidentally changed significantly. This module is a drop-in replacement for grunt-contrib-watch designed to retain the same behavior as the branch that was compatible with Grunt 0.3.
It's really only intended to be used by Lineman, but if you've experienced a performance regression with the Grunt 0.4-compatible versions of grunt-contrib-watch, you might consider experimenting with this module.
We experienced significant performance regressions when upgrading grunt-contrib-watch along with the rest of our grunt plugins. Because our web project tool Lineman relies on rapid feedback upon file change, this regression was a significant impediment to our productivity. The biggest cause performance regression was caused by a change in which the watch task would spawn a new Grunt process for every matched file change. That change's laudable intention was to sandbox tasks from another to prevent any pollution of state in the process. While it succeeds to sandbox the task runs, we haven't experienced related pain in Lineman's workflow and don't think the productivity disruption is worth it.
FAQs
Run predefined tasks whenever watched file patterns are added, changed or deleted.
The npm package grunt-watch-nospawn receives a total of 5,014 weekly downloads. As such, grunt-watch-nospawn popularity was classified as popular.
We found that grunt-watch-nospawn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.