
Security News
CISA’s 2025 SBOM Guidance Adds Hashes, Licenses, Tool Metadata, and Context
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Wikipedia on "Batcave" uses:
Upon his initial foray into crime-fighting, Wayne used the caves as a sanctum and to store his then-minimal equipment. As time went on, Wayne found the place ideal to create a stronghold for his war against crime, and has incorporated a plethora of equipment as well as expanding the cave for specific uses.
Frankly, I write a lot of code in a lot of languages. There's a lot of boilerplate, tools, and scripts I copy from project to project. Debugging, coding, documentation, tests, etc all are quite similar in goal across projects but differ wildly in implementation. I'd like to codify most of this so that, when switching between projects, the cost of context switching isn't as painful.
Essentially, I do roughly the same activities regardless of platform or language. This project is an experiment in solving the above problem.
Ideally it'd be sweet if this project would also manage my workstation as well as my projects. Dotfiles, packages, etc. I'm tired of setting this shit up or scripting it sideways every few months.
This project may end up looking a lot like an IDE plus some config management.
Maybe, for example, I'm writing an HTTP library in Ruby, and I want to:
But new projects should be easier, too:
Release management should be easier, too.
a 'thing' is a feature, boilerplate, some debug tool, metrics or testing tool, etc.
Example:
Both of the above will generate boilerplate projects for their respective languages. It currently uses git to find the root of your project directory and puts files based from that location.
Boilerplates should include basic tests, etc.
FAQs
Unknown package
We found that batcave demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.