Security News
PyPI Introduces Digital Attestations to Strengthen Python Package Security
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
@grrr/gulpfile
Advanced tools
An opinionated and modular gulpfile. Made with ❤️ by GRRR, a digital creative agency in Amsterdam.
Install this package in your project through yarn or npm:
$ npm install @grrr/gulpfile --save-dev
Create a gulp.json
config file (examples).
When transpiling JavaScript, add the required Babel dependencies for your project.
See the Babel docs for more information. A good starting point is by adding @babel/preset-env
:
$ npm install --save-dev @babel/preset-env
When using the watch task, create an environment variable called BROWSERSYNC_PROXY
with your app domain (eg: localhost:10000
). This will point Browsersync to your app. To do so, add a .env file in the root of your project. You can also load it from another location by specifying it in the gulp.json config file.
Run gulp by calling:
$ gulp --cwd . --gulpfile 'node_modules/@grrr/gulpfile/gulpfile.js'
You can also add shortcuts as npm scripts, and run them like so:
$ npm run build # run build task
$ npm run watch # run watch task
$ npm run build:production # run build for environment
$ npm run build images # run specific task
To do so, add these to the scripts
entry in your package.json
.
"scripts": {
"watch": "gulp watch --cwd . --gulpfile 'node_modules/@grrr/gulpfile/gulpfile.js'",
"build": "gulp --cwd . --gulpfile 'node_modules/@grrr/gulpfile/gulpfile.js'",
"build:staging": "gulp --staging --cwd . --gulpfile 'node_modules/@grrr/gulpfile/gulpfile.js'",
"build:production": "gulp --production --cwd . --gulpfile 'node_modules/@grrr/gulpfile/gulpfile.js'"
},
The individual tasks are:
browsersync
— auto refresh and hot reloading in the browserclean
— removes all built assetscopy
— copies files that don't need processing (like fonts, videos and the favicon)eslint
— lints js with opinionated rules, which can be overwritten by including your own .eslintrc
images
— runs imagemin on all images in the config.paths.images.src
and saves the result to config.paths.images.dist
javascript:build
— bundles JavaScript into a single bundle with Rollup and transpiles it with Babeljavascript:watch
— watches for changes and builds the bundle when changes are detectedjavascript:vendor
— copies and uglifies vendor files (can also concatenate them)init
— prints some debug infoicons
— creates a svg spritemodernizr
— checks js and scss source files for Modernizr tests and creates a custom Modernizr buildrevision
— creates a revisioned filename for each static assetsass
— compiles Sass with globbing and Autoprefixersass:lint
— lints Sass with opinionated rules, which can be overwritten by including your own .sass-lint.yml
The main tasks are:
build
runs all above tasks, except browsersync
(some tasks are dependent on the called environment)watch
runs the same tasks as default
but will retrigger when files are changed, and will start BrowsersyncFor more info, take a look into the tasks folder.
The project uses a few sensible defaults for prefixers and linters. They can all be overwritten.
Used in sass
task. Can be specified in the gulp.json
file in an autoprefixer
object within the sass
task.
Used in sass:lint
tasks. Place a .sass-lint.yml
file in the root of your project.
Used in eslint
tasks. Place an .eslintrc
file in the root of your project. You can additionally add an .eslintignore
for ignoring (wildcarded) folders or packages specific to your project.
To make changes to this gulpfile, it's best to replace the installed package in a real project with a locally linked development version. To do so, run the following command in the repo of this project:
$ yarn link
Inside the root of the project you want to test @grrr/gulpfile
in, run:
$ yarn link @grrr/gulpfile
When you're done, you can publish the changes and unlink the development version by running:
$ yarn unlink @grrr/gulpfile
$ yarn install
Note that when locally testing updated dependencies, it's better to use a tool like Yalc. Dependency resolution in linked packages (via yarn link
) does not work the same way as when the package would've been published.
FAQs
An opinionated set of Gulp tasks
The npm package @grrr/gulpfile receives a total of 29 weekly downloads. As such, @grrr/gulpfile popularity was classified as not popular.
We found that @grrr/gulpfile demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.