View trash on Snyk Open Source Advisor

Package Health Score

69 / 100

security
Security review needed
popularity
Influential project
maintenance
Sustainable
community
Sustainable

Explore Similar Packages

Security

Security review needed

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions

Version				Vulnerabilities	License Risk
9.0.0	\|	07/2024		0 C 0 H 0 M 0 L	0 H 0 M 0 L
8.1.1	\|	02/2023		0 C 0 H 0 M 0 L	0 H 0 M 0 L
7.2.0	\|	06/2021	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L
6.1.1	\|	11/2019		0 C 0 H 0 M 0 L	0 H 0 M 0 L
6.0.0	\|	05/2019		0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Influential project

Weekly Downloads (111,197)

GitHub Stars: 2.58K
Forks: 79
Contributors: 30

Direct Usage Popularity

The npm package trash receives a total of 111,197 downloads a week. As such, we scored trash popularity level to be Influential project.

Based on project statistics from the GitHub repository for the npm package trash, we found that it has been starred 2,575 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Sustainable

Readme.md: Yes
Contributing.md: No
Code of Conduct: Yes
Contributors: 30
Funding: Yes

With more than 10 contributors for the trash repository, this is possibly a sign for a growing and inviting community.

Embed Package Health Score Badge

Maintenance

Sustainable

Commit Frequency

Open Issues: 13
Open PR: 0
Last Release: 3 months ago
Last Commit: 3 months ago

Further analysis of the maintenance status of trash based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that trash demonstrates a positive version release cadence with at least one new version released in the past 12 months.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: >=18

Age: 10 years
Dependencies: 7 Direct
Versions: 44
Install Size: 224 kB
Dist-tags: 1
# of Files: 11
Maintainers: 1
TS Typings: No

trash has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Not sure how to use trash?

To help you get started, we've collected the most common ways that trash is being used within popular public projects.

doczjs / docz / packages / playgrood / src / utils / bundle.ts View on Github

export const createBundle = async (html: string, main: string) => {
  await trash(DIST_PATH)
  await trash(THEME_PATH)
  await tempFile(INDEX_JS, main)
  await tempFile(INDEX_HTML, html)

  const bundler = new Bundler(INDEX_HTML, {
    cacheDir: CACHE_PATH,
    outDir: DIST_PATH,
    publicURL: '/',
    outFile: 'index',
  })

  try {
    return await bundler.bundle()
  } catch (err) {
    console.log(err)
    return null
  }

View more ways to use trash

Move files and folders to the trash

Works on macOS (10.12+), Linux, and Windows (8+).

Note: The Linux implementation is not very good and not maintained. Help welcome. If no one steps up to help maintain it, I will eventually remove Linux support.

In contrast to fs.unlink, del, and rimraf which permanently delete files, this only moves them to the trash, which is much safer and reversible.

Install

npm install trash

Usage

import trash from 'trash';

await trash(['*.png', '!rainbow.png']);

API

trash(input, options?)

Returns a Promise.

input

Type: string | string[]

Accepts paths and glob patterns.

options

Type: object

glob

Type: boolean
Default: true

Enable globbing when matching file paths.

CLI

To install the trash command, run:

npm install --global trash-cli

Info

On macOS, macos-trash is used.
On Linux, the XDG spec is followed.
On Windows, recycle-bin is used.

FAQ

But I can do the same thing with `mv`

Not really. The mv command isn't cross-platform and moving to trash is not just about moving the file to a "trash" directory. On all OSes you'll run into file conflicts. The user won't easily be able to restore the file. It won't work on an external drive. The trash directory location varies between Windows versions. For Linux, there's a whole spec you need to follow. On macOS, you'll lose the Put back feature.

trash-cli - CLI for this module
empty-trash - Empty the trash
del - Delete files and folders

trash dependencies

@sindresorhus/chunkify @stroncium/procfs globby is-path-inside move-file p-map xdg-trashdir

trash development dependencies

ava tempfile tsd typescript xo

FAQs

What is trash?

Move files and folders to the trash. Visit Snyk Advisor to see a full health score report for trash, including popularity, security, maintenance & community analysis.

Is trash popular?

The npm package trash receives a total of 111,197 weekly downloads. As such, trash popularity was classified as an influential project. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is trash well maintained?

We found indications that trash maintenance is sustainable demonstrating some project activity. We saw a total of 30 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is trash safe to use?

While scanning the latest version of trash, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 1 November-2024, at 15:42 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP