🚀. Socket Launch Week Day 3:Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions.Learn more →
updot - npm Package Compare versions
| # updot | ||
| ## Unreleased | ||
| ## 1.2.0 (2026-06-13) | ||
| - changed: Convert the build tooling from Yarn to npm. | ||
| - security: Upgrade dependencies per Socket security recommendations. |
+39
| # updot | ||
| Copy dependencies from repos in the ../ folder to the current repo's node_modules. This is useful for development on dependent modules in a React Native project as `npm link` is broken in React Native. | ||
| Script will search in all folders at the peer level to the current project that `dotdotdep` is installed in and compare the folder name to all the folders in `node_modules`. if any match, it will call `npm run build` in that peer level folder then copy its contents into the same folder name in node_modules. If will first `rm -rf` the destination folder in `node_modules`. The contents in the source folder that it will copy will be either: | ||
| 1. Files that match the `package.json` `files` array. | ||
| or if there is no `files` array in `package.json` | ||
| 2. All files excluding | ||
| [ '/node_modules', | ||
| '.git', | ||
| '.idea', | ||
| '.vscode', | ||
| '.babelrc', | ||
| '.eslintrc.json', | ||
| '.flowconfig' ] | ||
| ## To use | ||
| npm install updot --save-dev | ||
| Then add a line to your `scripts` section | ||
| "updot": "updot", | ||
| To update the node_modules | ||
| npm run updot | ||
| ## Options | ||
| Change the source directory by passing a directory path as an argument after `-s` | ||
| "updot": "updot -s ../../myotherfolder", | ||
| Updot only a single dependency | ||
| npm run updot -- edge-currency-bitcoin |
+2
-4
| { | ||
| "name": "updot", | ||
| "version": "1.1.7", | ||
| "version": "1.2.0", | ||
| "description": "Update dependencies from the ../ of a repo into the repo's node_modules directory", | ||
| "bin": "./index.js", | ||
| "scripts": { | ||
| "test": "echo \"Error: no test specified\" && exit 1" | ||
| }, | ||
| "scripts": {}, | ||
| "author": "Paul Puey <paul@edgesecure.co", | ||
@@ -10,0 +8,0 @@ "homepage": "https://edgesecure.co", |
-39
| # updot | ||
| Copy dependencies from repos in the ../ folder to the current repo's node_modules. This is useful for development on dependent modules in a React Native project as `npm link` is broken in React Native. | ||
| Script will search in all folders at the peer level to the current project that `dotdotdep` is installed in and compare the folder name to all the folders in `node_modules`. if any match, it will call `npm run build` in that peer level folder then copy its contents into the same folder name in node_modules. If will first `rm -rf` the destination folder in `node_modules`. The contents in the source folder that it will copy will be either: | ||
| 1. Files that match the `package.json` `files` array. | ||
| or if there is no `files` array in `package.json` | ||
| 2. All files excluding | ||
| [ '/node_modules', | ||
| '.git', | ||
| '.idea', | ||
| '.vscode', | ||
| '.babelrc', | ||
| '.eslintrc.json', | ||
| '.flowconfig' ] | ||
| ## To use | ||
| npm install updot --save-dev | ||
| Then add a line to your `scripts` section | ||
| "updot": "updot", | ||
| To update the node_modules | ||
| npm run updot | ||
| ## Options | ||
| Change the source directory by passing a directory path as an argument after `-s` | ||
| "updot": "updot -s ../../myotherfolder", | ||
| Updot only a single dependency | ||
| npm run updot -- edge-currency-bitcoin |
-25
| # THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY. | ||
| # yarn lockfile v1 | ||
| fs-extra@^5.0.0: | ||
| version "5.0.0" | ||
| resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-5.0.0.tgz#414d0110cdd06705734d055652c5411260c31abd" | ||
| dependencies: | ||
| graceful-fs "^4.1.2" | ||
| jsonfile "^4.0.0" | ||
| universalify "^0.1.0" | ||
| graceful-fs@^4.1.2, graceful-fs@^4.1.6: | ||
| version "4.1.11" | ||
| resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.1.11.tgz#0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658" | ||
| jsonfile@^4.0.0: | ||
| version "4.0.0" | ||
| resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-4.0.0.tgz#8771aae0799b64076b76640fca058f9c10e33ecb" | ||
| optionalDependencies: | ||
| graceful-fs "^4.1.6" | ||
| universalify@^0.1.0: | ||
| version "0.1.1" | ||
| resolved "https://registry.yarnpkg.com/universalify/-/universalify-0.1.1.tgz#fa71badd4437af4c148841e3b3b165f9e9e590b7" |
New alerts
Unstable ownership
Supply chain riskA new collaborator has begun publishing package versions. Package stability and security risk may be elevated.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Fixed alerts
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Found 1 instance in 1 package
Improved metrics
- Number of low quality alerts
0
-100%Worsened metrics
- Total package byte prevSize
6774
-9.98%- Number of high supply chain risk alerts
1
Infinity%- Number of medium supply chain risk alerts
2
100%No dependency changes