Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Little helper to make node.js require
relative to your project root
When working on a node.js project with subfolders you might find it difficult to remember the correct relative path to include a common module or library which is not published on npm.
Using this module you just need to remember your own project directory structure and make all require
absolute to the project root directory
npm install rootpath
BEFORE
// from $HOME_PROJECT/lib/math/
var myLib = require('../myLibrary');
var myUtils = require('../../utils/myUtils');
var myTest = require('../../test/myTest');
AFTER
// from $HOME_PROJECT/lib/math/
require('rootpath')();
var myLib = require('lib/myLibrary');
var myUtils = require('utils/myUtils');
var myTest = require('test/myTest');
Forks and pull requests are welcome. There is always a better way of achieving a goal. This project will benefit from the contribution of the community.
npm test
MIT
FAQs
Little helper to make node.js require relative to your project root
The npm package rootpath receives a total of 363,316 weekly downloads. As such, rootpath popularity was classified as popular.
We found that rootpath demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.