
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign hits npm.
For all your node touching needs.
npm install touch
See man touch
This package exports a binary called nodetouch that works mostly
like the unix builtin touch(1).
var touch = require("touch")
Gives you the following functions:
touch(filename, options, cb)touch.sync(filename, options)touch.ftouch(fd, options, cb)touch.ftouchSync(fd, options)All the options objects are optional.
All the async functions return a Promise. If a callback function is provided, then it's attached to the Promise.
force like touch -f Booleantime like touch -t <date> Can be a Date object, or any parseable
Date string, or epoch ms number.atime like touch -a Can be either a Boolean, or a Date.mtime like touch -m Can be either a Boolean, or a Date.ref like touch -r <file> Must be path to a file.nocreate like touch -c BooleanIf neither atime nor mtime are set, then both values are set. If
one of them is set, then the other is not.
This package creates a nodetouch command line executable that works
very much like the unix builtin touch(1)
The 'fs-extra' package provides additional file system methods that aren't included in the native 'fs' module. It includes methods for creating and updating files, similar to 'touch', but also offers a wider range of file system operations like copying, moving, and removing files and directories.
The 'node-fs' package extends the native 'fs' module with additional file system methods. It includes functionality for creating and updating files, similar to 'touch', but also provides methods for recursive directory creation and symbolic link management.
The 'file-system' package is a simple wrapper around the native 'fs' module that provides additional convenience methods for file operations. It includes methods for creating and updating files, similar to 'touch', but also offers methods for reading and writing JSON files and working with directories.
FAQs
like touch(1) in node
The npm package touch receives a total of 8,832,000 weekly downloads. As such, touch popularity was classified as popular.
We found that touch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign hits npm.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.