
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
instant-public-file
Advanced tools
Using ngrok, instantly give a folder from your computer a public url. Allow your friends to transfer large files without first uploading to the cloud, and without authenticating.
npx instant-public-folder
OR
npm -g instant-public-folder
instant-public-folder
And send the https url from the ngrok interface to your friends!
You probably want to zip any large files first. Here are some ways to do that on OSX:
brew install p7zip
7z a name-of-my-archive.7z file1 file2 fileN
brew install zip
zip -9 -u name-of-my-archive.zip file1 file2 fileN
tar -czf name-of-my-archive.tar.gz file1 file2 fileN
Or just right click a folder in Finder and choose "Compress" :)
send module, which supports resuming, streaming, and range requests.Sometimes I find the need to send a large file to a friend. Large meaning > 1GB. I could upload it to Google Drive, or Dropbox, or Mega Upload, but what if your file is larger than your limit?
Additionally, an HTTP link is much easier for an end user to manage than a cloud service link. No authentication, no login, no signups. Just the file.
It's actually non-trivial to work through a network's NAT/Firewall, so this module uses ngrok to provide a public, one-time URL. I think this is a nice balance of security through obscurity and ease of use.
ISC
FAQs
Give a folder a public URL to enable no-frills https file downloading
The npm package instant-public-file receives a total of 1 weekly downloads. As such, instant-public-file popularity was classified as not popular.
We found that instant-public-file demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.