
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
@fomantic/gulp-concat-css
Advanced tools
Concatenate css files, rebasing urls and inlining @import
Forked Version using updated dependencies
Original repo at https://github.com/mariocasciaro/gulp-concat-css
Concatenates css files, bubbling up @import statements (as per the standard), and optionally rebasing urls and inlining local @import statements.
Install with npm.
npm install --save-dev gulp-concat-css
var gulp = require('gulp');
var concatCss = require('gulp-concat-css');
gulp.task('default', function () {
return gulp.src('assets/**/*.css')
.pipe(concatCss("styles/bundle.css"))
.pipe(gulp.dest('out/'));
});
TIP: for a proper import inlining and url rebase, make sure you set the proper base
for the input files.
concatCss(targetFile, options)
targetFile
: The relative path of the generated file containing the concatenated cssoptions
: (since 2.1.0)
inlineImports
: (default true
) Inline any local import statement foundrebaseUrls
: (default true
) Adjust any relative URL to the location of the target file.includePaths
: (default []
) Include additional paths when inlining importscommonBase
: (default to the base
property of the first file) Common base path from which files and urls resolveMIT @ Mario Casciaro
FAQs
Concatenate css files, rebasing urls and inlining @import
The npm package @fomantic/gulp-concat-css receives a total of 2,005 weekly downloads. As such, @fomantic/gulp-concat-css popularity was classified as popular.
We found that @fomantic/gulp-concat-css demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.