
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
Serialize an object to a file/directory tree. Available in npm as mkfiletree
Serialize an object to a file/directory tree
Particularly useful for making test fixtures where you need to create a non-trivial tree of files and don't want to have to mock out fs. See readfiletree for file tree deserialization.
Make a directory & file tree in the system's temporary directory, under a uniquely named subdirectory prefixed with the prefix argument.
callback is supplied, it will receive an error argument and a dir telling you the full path to the root directory created for you.callback is supplied, a Promise will be returned which you can await on for a dir telling you the full path to the root directory created for you.Using both mkfiletree and readfiletree we can do the following:
const mkfiletree = require('mkfiletree')
const readfiletree = require('readfiletree')
const directoryContents = {
'adir': {
'one.txt': '1\n2\n3\n',
'two.txt': 'a\nb\nc\n',
'deeper': {
'depths.txt': 'whoa...'
}
},
'afile.txt': 'file contents'
}
await mkfiletree.makeTemp('testfiles', directoryContents)
let obj = await readfiletree(dir)
console.log(obj)
The directory structre created above looks like the following:
$ find /tmp/testfiles11240-23530-r7rs3 -type f -exec sh -c "echo '\n{}: ' && cat '{}'" \;
→ /tmp/testfiles11240-23530-r7rs3/afile.txt:
file contents
/tmp/testfiles11240-23530-r7rs3/adir/deeper/depths.txt:
whoa...
/tmp/testfiles11240-23530-r7rs3/adir/two.txt:
a
b
c
/tmp/testfiles11240-23530-r7rs3/adir/one.txt:
1
2
3
And the output of the program should be the same as the input to mkfiletree:
{
'adir': {
'one.txt': '1\n2\n3\n',
'two.txt': 'a\nb\nc\n',
'deeper': {
'depths.txt': 'whoa...'
}
},
'afile.txt': 'file contents'
}
Clean up any temporary directories created with makeTemp() since the last cleanUp() call or the begining of the current process.
callback is supplied it will be supplied with an error argument if there was a problem deleting the directory & file tree.callback is supplied, a Promise will be returned that you can await on.Same as makeTemp() but you specify the exact root path to be created which will contain your directory tree.
callback is supplied, it receives the error and dir arguments.callback is supplied, a Promise will be returned which you can await on for a dir.Directories created with make() won't be removed with a cleanUp() call.
Tests can be run with npm test. I'm more than happy to receive contributions so fork away!
No, there is no sync version, do it async, it's good for your health and contains additional vitamin C, B1, B2 and folate.
mkfiletree is Copyright (c) 2014 Rod Vagg @rvagg and licenced under the MIT licence. All rights not explicitly granted in the MIT license are reserved. See the included LICENSE.md file for more details.
FAQs
Make a tree of files and directories from data defined in an object
The npm package mkfiletree receives a total of 224 weekly downloads. As such, mkfiletree popularity was classified as not popular.
We found that mkfiletree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.