Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@gulp-sourcemaps/map-file
Advanced tools
Gulp plugin for changing the file property of a sourcemap.
Gulp plugin for changing the file property of a sourcemap.
var mapFile = require('@gulp-sourcemaps/map-file');
gulp.src(...)
.pipe(sourcemaps.init())
.pipe(sourcemaps.write())
.pipe(mapFile(function(filePath, file) {
return '../' + filePath;
}))
.pipe(gulp.dest(...))
mapFile(mapFn)
Takes a map function as the only argument. Returns an objectMode
Transform stream.
mapFn(filePath, file)
The map function is called once per each Vinyl
object passed through the stream that contains a sourcemap. The map function is called with the filePath
string from the file
property of the sourcemap and the file
object it originated from. The return value replaces the original value.
If a Vinyl
object doesn't have a sourceMap
property, the file is passed through the stream without having the mapFn
called. If the sourceMap.file
property doesn't exist, filePath
will be undefined.
All file
properties are normalized to use /
instead of \\
as path separators.
MIT
FAQs
Gulp plugin for changing the file property of a sourcemap.
We found that @gulp-sourcemaps/map-file demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.