Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@bva/gulp-shopify-upload
Advanced tools
A tool to watch and upload files to Shopify for use in theme editing
gulp-shopify-upload-with-callbacks is a Gulpjs plugin forked from https://github.com/mikenorthorp/gulp-shopify-upload and then augmented to allow for callbacks after a file has been uploaded.
That project was a port of a similar plugin using Grunt called grunt-shopify, thank you to the author for making a great plugin for Shopify.
assets, layout, config, snippets, templates, locales
.shopifyTheme/
|-- gulpfile.js
|-- assets/
|-- config/
|-- layout/
|-- locales/
|-- snippets/
|-- templates/
Example Gulpfile
// Gulp plugin setup
var gulp = require('gulp');
// Watches single files
var watch = require('gulp-watch');
var gulpShopify = require('gulp-shopify-upload');
gulp.task('shopifywatch', function() {
return watch('./+(assets|layout|config|snippets|templates|locales)/**')
.pipe(gulpShopify('API KEY', 'PASSWORD', 'MYSITE.myshopify.com', 'THEME ID'));
});
// Default gulp action when gulp is run
gulp.task('default', [
'shopifywatch'
]);
gulpShopify('API KEY', 'PASSWORD', 'MYSITE.myshopify.com', 'THEME ID')
API KEY
is the API Key generated when creating a private app in ShopifyPASSWORD
is the Password generated when creating a private app in ShopifyMYSITE.myshopify.com
is the URL of your shopTHEME ID
is the ID of your theme and is OPTIONAL, if not passed in, the current working theme will be usednpm install gulp gulp-watch gulp-shopify-upload
gulp
and edit one of your theme files, it should automatically be uploaded to ShopifyCustomize Your Base Deployment Path
If your project structure is different (perhaps you use Gulpjs to compile your theme to another directory), you can change the directory from which the plugin picks up files.
To do so, simply provide an additional options hash to function call, with a basePath
property.
var options = {
"basePath": "some/other-directory/"
};
// With a theme id
gulpShopify('API KEY', 'PASSWORD', 'MYSITE.myshopify.com', 'THEME ID', options)
// Without a theme id
gulpShopify('API KEY', 'PASSWORD', 'MYSITE.myshopify.com', null, options)
Deploy the Entire Site You can also deploy the entire site for use with continuous integration.
gulp.task('deploy', ['build'], function() {
return gulp.src('./+(assets|layout|config|snippets|templates|locales)/**')
.pipe(gulpShopify('API KEY', 'PASSWORD', 'MYSITE.myshopify.com', 'THEME ID'));
;
});
Created by Able Sense Media - 2015
FAQs
A tool to watch and upload files to Shopify for use in theme editing
We found that @bva/gulp-shopify-upload demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.