
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
modeYou know that mode property on the fs.Stat object that you probably
usually just ignore? Well there's acutally a lot of information packed
into that number.
The specific information includes:
setuid and setgid bits are setsticky bit is setThis module helps you extract that information.
All the getters are also setters, which change the mode property
appropriately. This is useful for when you have to build up your
own fs.Stat object for whatever reason (like when implementing a
FUSE filesystem.
$ npm install stat-mode
So given some arbitrary file (let's say /bin/echo):
$ ls -l /bin/echo
-rwxr-xr-x 1 root wheel 14128 Aug 11 2013 /bin/echo
We can inspect it using the fs.stat() call and creating a Mode instance
on top of it.
var fs = require('fs');
var Mode = require('stat-mode');
fs.stat('/bin/echo', function (err, stat) {
if (err) throw err;
// create a "Mode" instance on top of the `stat` object
var mode = new Mode(stat);
// you can check what kind of file it is:
mode.isDirectory();
// false
mode.isFIFO();
// false
mode.isFile();
// true
// and you can also check individual owner, group and others permissions
mode.owner.read;
// true
mode.owner.write;
// true
mode.owner.execute;
// true
mode.group.read;
// true
mode.group.write;
// false
mode.group.execute;
// true
mode.others.read;
// true
mode.others.write;
// false
mode.others.execute;
// true
// the `toString()` output resembes the `ls -l` output:
mode.toString();
// '-rwxr-xr-x'
});
You must pass in "stat" object to the Mode constructor. The "stat"
object can be a real fs.Stat instance, or really any Object with a
mode property.
Returns true if the mode's file type is "directory", false otherwise.
If you pass true to the function, then the mode will be set to "directory".
Returns true if the mode's file type is "file", false otherwise.
If you pass true to the function, then the mode will be set to "file".
Returns true if the mode's file type is "block device", false otherwise.
If you pass true to the function, then the mode will be set to "block device".
Returns true if the mode's file type is "character device", false otherwise.
If you pass true to the function, then the mode will be set to "character
device".
Returns true if the mode's file type is "symbolic link", false otherwise.
If you pass true to the function, then the mode will be set to "symbolic link".
Returns true if the mode's file type is "FIFO", false otherwise.
If you pass true to the function, then the mode will be set to "FIFO".
Returns true if the mode's file type is "socket", false otherwise.
If you pass true to the function, then the mode will be set to "socket".
true if the mode is "owner read" rights, false otherwise.
true if the mode is "owner write" rights, false otherwise.
true if the mode is "owner execute" rights, false otherwise.
true if the mode is "group read" rights, false otherwise.
true if the mode is "group write" rights, false otherwise.
true if the mode is "group execute" rights, false otherwise.
true if the mode is "others read" rights, false otherwise.
true if the mode is "others write" rights, false otherwise.
true if the mode is "others execute" rights, false otherwise.
fs-extra is a package that extends the native Node.js fs module with additional methods and promises. It includes methods for reading and writing file permissions, similar to stat-mode, but also provides a broader range of file system operations such as copying, moving, and removing files and directories.
chmodr is a package specifically designed for recursively changing file permissions. While stat-mode focuses on interpreting and modifying file modes, chmodr provides a simple interface for changing permissions of entire directory trees, making it more suitable for bulk permission changes.
FAQs
Offers convenient getters and setters for the stat `mode`
We found that stat-mode demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Security News
TypeScript 6.0 will be the last JavaScript-based major release, as the project shifts to the TypeScript 7 native toolchain with major build speedups.