Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
ctg-compiler
Advanced tools
Welcome to the ctg-compiler. This is a little compiler module I made which allows compiling of sass and dust files much easier when using client-side templating.
$ npm install ctg-compiler
A quick example of it's use would be to watch for file changes for both dust and sass files in a project:
compiler = require('ctg-compiler');
compiler.compileSass("public/includes/sass/main.scss",
"public/includes/main.css", false, true);
compiler.compileDust("public/includes/dust/home.dust",
"public/includes/home.js", true);
Note: The paths specified must be relative to the calling script in order for the compiling to be successful.
compiler.compileFile(readPath, writePath, watchFile, process)
Reads the contents of the file given from 'readPath' and passes it to the process function. The process function will be given a 'data' parameter containing the data read from readPath. The function will require a return to be written to the given 'writePath'. If you wish to watch a given file, you can set 'watchFile' to true and will thus recompile the file every time a change is made.
compiler.compileSass(readPath, writePath, compressed, watchFile)
Similar to compileFile only a process function is not required, instead a 'compressed' boolean parameter is needed which will affect the outcome of the css file. Used merely to ease compiling of Scss files.
compiler.compileDust(readPath, writePath, watchFile)
Similar to compileFile only a process function is not required. Used merely to ease compiling of Dust files.
FAQs
Sass and dust compiler for client-side templating.
The npm package ctg-compiler receives a total of 3 weekly downloads. As such, ctg-compiler popularity was classified as not popular.
We found that ctg-compiler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.