
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Resolve parent directories, execute a function on every dir found until a result is returned
Resolves is a small utility that will resolve the parent folder of the supplied root until the iterator function returns a given value.
npm install --save resolves
var resolves = require('resolves');
var path = require('path');
var fs = require('fs');
var gitignore = resolves(process.cwd(), function next(dir) {
var ignore = path.join(dir, '.gitignore');
if (fs.existsSync(ignore)) return fs.readFileSync(ignore, 'utf-8');
});
As seen in the snippet above, the resolve method requires 2 arguments:
dir The initial directory that we start resolving in.iteractor A function that is called for every directory until it returns
a value that can be returned. This includes the directory you initially
provided.If the iterator does not find anything, it will keep iterating until it reaches the root folder.
MIT
FAQs
Resolve parent directories, execute a function on every dir found until a result is returned
The npm package resolves receives a total of 271 weekly downloads. As such, resolves popularity was classified as not popular.
We found that resolves demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.