
Security News
Inside Lodash’s Security Reset and Maintenance Reboot
Lodash 4.17.23 marks a security reset, with maintainers rebuilding governance and infrastructure to support long-term, sustainable maintenance.
@sucrase/gulp-plugin
Advanced tools
This is a simple Gulp plugin that makes it easy to tie Sucrase into your build.
Sucrase is a peer dependency, so you'll need to install it as well:
yarn add --dev @sucrase/gulp-plugin sucrase
In your gulpfile, you can add it like this:
const sucrase = require('@sucrase/gulp-plugin');
...
.pipe(sucrase({transforms: ['imports', 'jsx']}))
...
FAQs
Gulp plugin for Sucrase
The npm package @sucrase/gulp-plugin receives a total of 4 weekly downloads. As such, @sucrase/gulp-plugin popularity was classified as not popular.
We found that @sucrase/gulp-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Lodash 4.17.23 marks a security reset, with maintainers rebuilding governance and infrastructure to support long-term, sustainable maintenance.

Security News
n8n led JavaScript Rising Stars 2025 by a wide margin, with workflow platforms seeing the largest growth across categories.

Security News
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.