
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
disksweep
Advanced tools
Affected versions:
Free up disk space fast — find and delete node_modules, .venv, __pycache__, dist, build, target and other regenerable folders across all your projects. A safe, cross-stack, zero-dependency npkill alternative (dry-run by default).
node_modules, .venv, __pycache__, .pytest_cache, dist, build, target, .next…
they pile up across every old project and quietly eat your SSD. disksweep finds them all,
shows how much space each is wasting, and lets you wipe them safely. Dry-run by default.
Zero dependencies.
uvx disksweep # scan the current folder, show what's reclaimable
uvx disksweep ~/code -i # interactively pick what to delete
$ uvx disksweep ~/code
1 4.2 GB 2mo acme-api/node_modules
2 1.1 GB 3w ml-thing/.venv
3 512 MB 1w ml-thing/__pycache__
4 380 MB 1d storefront/.next
Reclaimable: 6.2 GB across 4 directories
Dry run — nothing deleted. Re-run with `-i` to choose, or `-d` to delete all.
Also available as the shorter
sweepcommand after install.
uvx disksweep # run without installing (uv)
pipx install disksweep # or install the CLI globally
pip install disksweep # or into an environment
.git, and
refuses to run at a drive root, your home folder, or its parent without --force..venv, __pycache__, .pytest_cache, .mypy_cache,
.ruff_cache), JavaScript (node_modules, .next, .turbo), Rust (target) and more
in one pass.--json and --yes make it CI/automation friendly.By default (unambiguous, always-regenerable): node_modules, .venv, venv,
__pycache__, .pytest_cache, .mypy_cache, .ruff_cache, .next, .nuxt,
.svelte-kit, .turbo, .parcel-cache.
Add the heavier, occasionally hand-authored build dirs (dist, build, coverage,
target) with --aggressive, or pick your own with --include:
uvx disksweep --aggressive
uvx disksweep --include node_modules,.venv,target
| Option | Description |
|---|---|
-i, --interactive | Pick which directories to delete (e.g. 1,3-5, all, none) |
-d, --delete | Delete everything found (asks to confirm) |
-y, --yes | Skip the confirmation (use with --delete) |
-a, --aggressive | Also target dist, build, coverage, target |
--older-than N | Only include directories not modified in the last N days |
--include a,b | Comma-separated directory names to target (overrides defaults) |
--json | Output results as JSON; never deletes |
--force | Allow running at a drive root / home directory |
from disksweep import scan, remove_all, human_size
found = scan("/path/to/code", older_than_days=30)
print("reclaimable:", human_size(sum(r["size"] for r in found)))
# remove_all(found) # when you're sure
Run uvx disksweep in any parent folder to list every regenerable dir with its size, then
uvx disksweep -d to delete them. They're rebuilt next time you run npm install /
pip install / your tests, so reclaiming the space is safe.
No. It only removes directories whose name is on a curated allowlist of
always-regenerable folders. It's dry-run by default, never follows symlinks, and refuses to
run at a drive root, your home folder, or its parent. Ambiguous build dirs (dist, build,
target, coverage) are excluded unless you pass --aggressive.
npkill focuses on node_modules. disksweep is a zero-dependency, cross-stack alternative
that also clears Python, Rust and framework caches, adds --older-than, a --json mode, and
stronger safety defaults. Same tool is on npm too (npx disksweep).
JavaScript-first? The same tool ships on npm — npx disksweep.
MIT — free for personal and commercial use.
FAQs
Free up disk space fast — find and delete node_modules, .venv, __pycache__, dist, build, target and other regenerable folders across all your projects. A safe, cross-stack, zero-dependency npkill alternative (dry-run by default).
The pypi package disksweep receives a total of 0 weekly downloads. As such, disksweep popularity was classified as not popular.
We found that disksweep demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.