
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Monitor .hbs (Handlebar) file for changes and execute specified .js
Install the package globally so you can use the hbsmon CLI command:
npm i -g hbsmon
hbsmon -h
hbsmon -V
.hbs file, run script file with template basenamehbsmon template
template.hbs file and run template.js script.hbs.js.hbs file, run specified scripthbsmon template create-page
template.hbs file.hbs.jscreate-page.jsThis example shows how you to monitor changes to a .hbs template file and run a script when the template file changes.
template.hbs file: this is the file template file you will monitor for changes<body>
<ul>
{{#each items as |item|}}
<li>
<a href="{{{item.url}}}" title="">{{{item.text}}}</a>
</li>
{{/each}}
</ul>
</body>
create.js file: this is the script you will invoke when template.hbs file changes.const Handlebars = require('handlebars')
const fs = require('fs')
function render(source, data = {}) {
let template = Handlebars.compile(source);
return template(data);
}
let items = "First Second".split(/\s+/).map((label, idx) => {
return {
text: `${label} ${idx+1}`,
url: `#`,
}
})
let source = fs.readFileSync(`template.hbs`, "utf-8")
let output = render(source, {items: items})
fs.writeFileSync('result.html', output, "utf-8");
console.log(source);
hbsmon globally, if not already installed.npm i -g hbsmon
To check hbsmon is already installed, type hbsmon -V at the command prompt.
hbsmon in a terminalhbsmon template create
template.hbs and result.htmlAs you type changes to your template, the result.html also changes. When hbsmon detects a change in the .hbs file, it invokes the change.js script, which uses the .hbs file to create the result.html file.
FAQs
Monitor .hbs (Handlebar) file for changes and execute specified .js file
We found that hbsmon demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.