Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
gems-assets-data
Advanced tools
Small utility for getting you gems path and set of paths, where gems assets are located.
Small utility for getting you gems path and set of paths, where gems assets are located.
0.1.1
npm install gems-assets-data
This package helps to resolve gems path, you should have bundler installed for this and be in the root of your application directory. It also can provide list of paths, where gems assets are located. This is useful, if you want to find all places, where sprockets manifests can be located.
GemsAssetsData = require('gems-assets-data')
gemsAssets = new GemsAssetsData()
gemsAssets.resolve().then ->
gemsAssets.path()
gemsAssets.dirs()
This is method, which actually resolves all data, it is working asynchrounously and returns deferred object. After data is resolved, you can get access to it.
Returns previously resolved local gems path.
Returns previously resolved gems assets paths.
You can integrate this with gulp easily.
gulp = require('gulp')
karma = require('gulp-karma')
GemsAssetsData = require('gems-assets-data')
gemsAssets = new GemsAssetsData()
# this is the task, which resolves gems assets data
gulp.task 'resolve_gems_data', ->
gemsAssets.resolve()
# this is using previously defined task
gulp.task 'karma:ci', ['resolve_gems_data'], ->
# you can get access to gems assets data now
gemsDirs = gemsAssets.dirs()
Then we can perform this task.
gulp --require coffee-script/register karma:ci
FAQs
Small utility for getting you gems path and set of paths, where gems assets are located.
The npm package gems-assets-data receives a total of 2 weekly downloads. As such, gems-assets-data popularity was classified as not popular.
We found that gems-assets-data demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.