
Product
Introducing Reachability for PHP
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.
ignore-by-default
Advanced tools
This is a package aimed at Node.js development tools. It provides a list of directories that should probably be ignored by such tools, e.g. when watching for file changes.
npm install ignore-by-default
The ignore-by-default module exports a directories() function, which will
return an array of directory names. These are the ones you should ignore.
// ['.git', '.sass_cache', …]
const ignoredDirectories = require('ignore-by-default').directories()
The 'ignore' package provides a way to filter out files and directories based on .gitignore rules. It is more flexible and allows custom ignore rules, whereas ignore-by-default provides a static list of commonly ignored directories.
The 'minimatch' package is a glob matcher that can be used to match file paths against glob patterns. It is more general-purpose compared to ignore-by-default, which specifically lists directories to ignore.
The 'glob' package allows you to match files using the patterns the shell uses, like stars and stuff. It can be used to find files and directories that match certain patterns, offering more control compared to the static list provided by ignore-by-default.
FAQs
A list of directories you should ignore by default
The npm package ignore-by-default receives a total of 9,743,638 weekly downloads. As such, ignore-by-default popularity was classified as popular.
We found that ignore-by-default demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Reachability analysis for PHP is now available in experimental, helping teams identify which vulnerabilities are actually exploitable.

Product
Export Socket alert data to your own cloud storage in JSON, CSV, or Parquet, with flexible snapshot or incremental delivery.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.