Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Peep is a smart fs.watch wrapper which is lighter and faster, uses as less fs.FSWatchers as possible, and could prevent duplicate watching.
Peep is a smart fs.watch
wrapper which is lighter and faster. It uses as little fs.FSWatcher
s as possible, and can prevent duplicate watching.
Peep has a better .add()
method which can automatically detect nested structures between the current watched files and directories, and choose the best strategy to make it fast and use less resources.
npm install peep --save
var peep = require('peep')();
peep
.on('all', function(event, path){
console.log(event, path);
})
.add('test/foo.js')
.add('test') // 'test' contains 'test/foo.js'
Peep doesn't depend on 'globule'
module. If you prefer the feature of globbing files, you could do this:
var globule = require('globule');
peep.add( globule.find('test/**/*.js') );
Adds file(s) or directories to be watched
peep.add('test/foo.js', 'test/foo2.js');
peep.add(['test/foo.js', 'test/foo2.js']);
Removes file(s) or directories from being watched.
Removes all watched files and directories.
Array.<String>
The current watched files.
What's coming...
FAQs
Peep is a smart fs.watch wrapper which is lighter and faster, uses as less fs.FSWatchers as possible, and could prevent duplicate watching.
The npm package peep receives a total of 6 weekly downloads. As such, peep popularity was classified as not popular.
We found that peep demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.