Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@devcode/init
Advanced tools
DevCode management for DevCode's plugins. It contains Gulp tasks: default, build, clean, watch and init-config.
What things you need:
Install it as devDependency:
npm install -D @devcode/init
Include it in gulpfile.js
:
const gulp = require('gulp')
const init = require('@devcode/init')
const plugins = {
browserSync: require('@devcode/browser-sync')
}
const env = process.argv.includes('build') ? 'production' : 'development'
init({
gulp, // required
env, // required
plugins: { // required
reload: [plugins.browserSync],
assets: [...],
code: [...],
static: [...]
}
})
init: function (settings: object)
The init
function needs env
(string 'development' or 'production') and plugins
which contains four keys: reload
, assets
, code
and static
. Each key can contain array of plugins. In the Gulp tasks default
and build
are plugins kept in the chronological order: clean
, [plugins.assets]
, [plugins.code]
, [plugins.static]
, and for the default
task as the last is (watch
).
src: string
- name of the folder with source codedist: string
- name of the folder with distribution codemodule.exports = {
src: 'src',
dist: 'build'
}
Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.
We use SemVer for versioning.
See also the list of contributors who participated in this project.
This project is licensed under the MIT License - see the LICENSE.md file for details.
FAQs
The glue for DevCode plugins
We found that @devcode/init demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.