The file-temp library is an alternate way to handle tempfile generation.
gem install file-temp
gem cert --add <(curl -Ls https://raw.githubusercontent.com/djberg96/file-temp/main/certs/djberg96_pub.pem)
require 'file/temp'
fh = File::Temp.new
fh.puts "hello"
fh.close # => Tempfile automatically deleted
fh = File::Temp.new(delete: false)
fh.puts "world"
fh.close # => Tempfile still on your filesystem
Unlike the tempfile library that ships with Ruby's standard library, this
library uses your system's native tmpfile or mkstemp functions.
This library is also more secure because it restricts file permission via
umask for files created with mkstemp.
Finally, this library subclasses the File class. This means you get almost exactly the same interface as the File class. The only difference is the constructor.
Note that my original motivation was a problem with race conditions in the tempfile library, but that was a very long time ago, and my assumption at this point is that it's no longer true. But, I still prefer this version to the one in the Ruby standard library.
The implementation for JRuby uses the Java API, not the C API. The temporary file name generated by Java is different than the C version, since it uses a GUID instead of the 'XXXXXX' template, but the interface is otherwise identical.
As of version 1.7.2 there is a known issue with using File::Temp.open vs File::Temp.new. See https://github.com/jruby/jruby/issues/7847 for more details.
You may need to use the mingw build in order to use this library.
Also, there was a bug with the GetTempFileName function on certain versions
of MS Windows that may cause a failure. However, if you're patched up you
should not see it.
Apache-2.0
(C) 2007-2023 Daniel J. Berger All Rights Reserved
This library is provided "as is" and without any express or implied warranties, including, without limitation, the implied warranties of merchantability and fitness for a particular purpose.
Daniel J. Berger
tmpfile(), mkstemp(), tmpnam()
FAQs
Unknown package
We found that file-temp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.
Security News
Research
Socket researchers found a malicious Maven package impersonating the legitimate ‘XZ for Java’ library, introducing a backdoor for remote code execution.