
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
Copy dependencies from repos in the ../ folder to the current repo's node_modules. This is useful for development on dependent modules in a React Native project as npm link is broken in React Native.
Script will search in all folders at the peer level to the current project that dotdotdep is installed in and compare the folder name to all the folders in node_modules. if any match, it will call npm run build in that peer level folder then copy its contents into the same folder name in node_modules. If will first rm -rf the destination folder in node_modules. The contents in the source folder that it will copy will be either:
Files that match the package.json files array.
or if there is no files array in package.json
All files excluding
[ '/node_modules', '.git', '.idea', '.vscode', '.babelrc', '.eslintrc.json', '.flowconfig' ]
npm install updot --save-dev
Then add a line to your scripts section
"updot": "updot",
To update the node_modules
npm run updot
Change the source directory by passing a directory path as the first argument
"updot": "updot ../../myotherfolder",
FAQs
Update dependencies from the ../ of a repo into the repo's node_modules directory
The npm package updot receives a total of 287 weekly downloads. As such, updot popularity was classified as not popular.
We found that updot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.