
Product
Rust Support Now in Beta
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
This package checks gulpplugins which is marked in blacklist.

$ npm install --save-dev cull-gulp
$ npm install -g cull-gulp
$ cull-gulp --path=path/to/project/root
[information] 'gulp-foo' is not marked in the blacklist.
[information] 'gulp-bar' is not marked in the blacklist.
[information] 'gulp-baz' is not marked in the blacklist.
[ok] No gulpplugins marked in the blackList found.
$ cull-gulp # refers current directory
$ cull-gulp --module=gulp-foo2
[warn] 'gulp-foo2' is marked in blacklist.
┗━[reason] duplicate of gulp-foo
--strict raises error.
See $ cull-gulp --help for the others.
You can stop npm test if some plugins are marked as blacklist.
{
scripts: {
"pretest": "set -e; ./node_modules/.bin/cull-gulp --strict --quiet",
"test": "# do test"
}
}
You can stop CI if some plugins are marked as blacklist
before_script:
- "npm install -g cull-gulp"
script:
- "set -e"
- "cull-gulp --strict"
- "npm test"
FAQs
check if your dependencies blacklisted.
The npm package cull-gulp receives a total of 0 weekly downloads. As such, cull-gulp popularity was classified as not popular.
We found that cull-gulp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.

Product
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.

Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.