Gathering detailed insights and metrics for find-up-simple
Gathering detailed insights and metrics for find-up-simple
Find a file or directory by walking up parent directories — Zero dependencies
Installations
npm install find-up-simpleDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Min. Node Version
>=18
Node Version
23.6.1
NPM Version
10.9.2
Score
99.8
Supply Chain
96.8
Quality
76
Maintenance
100
Vulnerability
100
License
Languages
1
JavaScript
JavaScript (100%)
Developer
sindresorhus
Download Statistics
Total Downloads
131,357,149
Last Day
207,016
Last Week
3,496,172
Last Month
14,688,620
Last Year
112,287,045
GitHub Statistics
MIT License
80 Stars
7 Commits
3 Forks
2 Watchers
1 Branches
2 Contributors
Updated on Jun 05, 2025
Bundle Size
1.30 kB
Minified
562.00 B
Minified + Gzipped
Sponsor this package
Maintainers
1
Package Meta Information
Latest Version
1.0.1
Package Id
find-up-simple@1.0.1
Unpacked Size
7.08 kB
Size
2.58 kB
File Count
5
NPM Version
10.9.2
Node Version
23.6.1
Published on
Mar 01, 2025
Total Downloads
Cumulative downloads
Total Downloads
131,357,149
Last Day
1.1%
207,016
Compared to previous day
Last Week
-6.8%
3,496,172
Compared to previous week
Last Month
10.6%
14,688,620
Compared to previous month
Last Year
488.8%
112,287,045
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
find-up-simple
Find a file or directory by walking up parent directories
This is a simpler version of my find-up package, now with zero dependencies.
Install
1npm install find-up-simple
Usage
/
└── Users
└── sindresorhus
├── unicorn.png
└── foo
└── bar
├── baz
└── example.js
example.js
1import {findUp} from 'find-up-simple'; 2 3console.log(await findUp('unicorn.png')); 4//=> '/Users/sindresorhus/unicorn.png'
API
findUp(name, options?)
Returns a Promise for the found path or undefined if it could not be found.
findUpSync(name, options?)
Returns the found path or undefined if it could not be found.
name
Type: string
The name of the file or directory to find.
options
Type: object
cwd
Type: URL | string
Default: process.cwd()
The directory to start from.
type
Type: string
Default: 'file'
Values: 'file' | 'directory'
The type of path to match.
stopAt
Type: URL | string
Default: Root directory
The last directory to search before stopping.
FAQ
How is it different from find-up?
- No support for multiple input names
- No support for finding multiple paths
- No custom matching
- No symlink option
- Zero dependencies
Related
- find-up - A more advanced version of this package
- find-up-cli - CLI for this module
- package-up - Find the closest package.json file
- pkg-dir - Find the root directory of an npm package
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
security policy file detected
Details
- Info: security policy file detected: .github/security.md:1
- Info: Found linked content: .github/security.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/security.md:1
- Info: Found text in security policy: .github/security.md:1
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: license:0
- Info: FSF or OSI recognized license: MIT License: license:0
Reason
Found 2/7 approved changesets -- score normalized to 2
Reason
1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/sindresorhus/find-up-simple/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/sindresorhus/find-up-simple/main.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:21
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 2 are checked with a SAST tool
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Score
4.2
/10
Last Scanned on 2025-06-23
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More