
Security News
Deno 2.6 + Socket: Supply Chain Defense In Your CLI
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.
Run a command, watch the filesystem, stop the process on file change and then run the command again...
Run a command, watch the filesystem, stop the process on file change and then run the command again...
You can install this command line tool with npm like this:
npm install -g hubmon
hubmon must be used as a prefix before the command you want to run.
Here's an example on how to use hubmon with a command like ls -la src:
hubmon ls -la src
In this example, hubmon will:
ls -la srcOn each filesystem change, hubmon will:
ls -la src againNOTE: Killing the process if it's still running is very useful if you command runs an HTTP server for example.
--watch optionBy default, all files (except dotfiles) are watched (with the **/* glob pattern).
If you want to only watch some files, you can use a different glob pattern with the --watch option (or its short -w alias) like this:
hubmon --watch '*.txt' ls -la src
WARNING: the quote around the glob pattern is important.
--watch option with multiple patternsYou can pass multiple patterns by join them with a comma like this:
hubmon --watch '*.txt,*.sql' ls -la src
--watch optionIf you want to ignore some files, you can use patterns prefixed with !.
Here's an example where you watch all files in src but not the .sql files:
hubmon --watch 'src/**/*,!src/**/*.sql' ls -la src
Under the hood, hubmon uses picomatch for glob patterns, please refer to their docs for more details.
If you often use hubmon with commands like node, python or ruby, it can be nice to set some aliases like these:
alias wnode='hubmon node'
alias wpython='hubmon python'
alias wruby='hubmon ruby'
This way, in a few keystrokes, you can add the letter w (like watch) at the beginning of your command to trigger hubmon's watching mechanism:
wnode my-script.js
If you're using Node.js with volta, we have a special trick for you.
By default, the way volta handles automatic version switch would break.
We added some special code so the versions you defined for npm, yarn and node are the right one.
FAQs
Run a command, watch the filesystem, stop the process on file change and then run the command again...
We found that hubmon demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.