Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Traverse a folder in node, turning its contents into an object for easy consumption
$ npm install spelunk
spelunk.js turns a folder into an object. This folder...
data
|- config.json
|- tables
|- population.csv
|- growth.csv
|- slides
|- 0.txt
|- 1.txt
|- 2.txt
|- 3.txt
|- i18n
|- en-GB.json
|- en-US.json
|- fr.json
|- de.json
|- ...
...becomes this object:
{
config: { <contents of config.json> }, // parsed as JSON
tables: {
population: <contents of population.csv> // as a string
growth: <contents of growth.csv>
},
slides: [
<contents of 0.txt>, // because these files have
<contents of 1.txt>, // numeric names, `slides` is
<contents of 2.txt>, // an array, not an object
<contents of 3.txt>
],
i18n: {
"en-GB": <contents of en-GB.json>,
"en-US": <contents of en-US.json>,
"fr": <contents of fr.json>,
"de": <contents of de.json>,
...
}
}
If a file contains JSON, it is parsed as JSON; if not, it is treated as text. If a folder only contains items with numeric filenames (as in the case of the slides
folder above), it will become an array rather than an object.
spelunk.js uses the standard Node pattern:
callback = function ( error, result ) {
if ( error ) {
// oh noes!
}
doSomethingWith( result );
};
spelunk( 'myFolder', callback );
Exclude files that match a certain pattern (this uses minimatch syntax):
spelunk( 'myFolder', { exclude: '**/README.md' }, callback );
Flatten a folder into a JSON file, so it can be consumed by a browser with a single HTTP request (see also grunt-spelunk):
fs = require( 'fs' );
callback = function ( error, result ) {
if ( error ) {
// Can you handle it / If I go there baby with you / I can handle it
}
fs.writeFile( 'output.json', JSON.stringify( result ) );
};
spelunk( 'myFolder', callback );
Because traversing a folder tree and mapping all its nooks and crannies feels a bit like spelunking. Plus it's fun to say.
$ npm run test
MIT, copyright 2014 @Rich_Harris
FAQs
Traverse a folder in node, turning its contents into an object for easy consumption
We found that spelunk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.