Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Gib is a build tool for static assets inspired by NGBP, Brunch and Grunt. Built on top of gulp, Gib is declaratively configured, favors convention and is extensible. It may be used in an existing gulp file and gulp tasks may be created directly in a gibberish file.
Gib is usable with gulp and has it's own CLI. It is configured declaratively
using a plain old js object or JSON format called gibberish
. Gib will
define several default tasks including: build
, compile
, watch
, server
.
You may use gib to declaratively configure tasks in your gulp file. You may continue using your own gulp tasks, extending your build as necessary.
After installing gulp and gib, you may do gulp
to start a development watcher.
gulp compile
will produce production assets.
var gib = require('gib');
var gulp = require('gulp');
// Gib configuration:
var config = {
// Destination for built assets:
build: 'build',
js: {
// JS target using browserify:
'scripts/site.js': {
browserify: true,
src: './src/index.js'
}
},
less: {
// Less target for vendor assets:
'styles/site-vendor.css': [
'../vendor/styles/bootstrap/bootstrap.less',
'../vendor/styles/font-awesome/font-awesome.less',
],
// Less target using custom watch pattern and single entry:
'styles/site.css': {
watch: './**/*.less',
src: './styles/index.less'
}
},
// Misc. static assets:
assets: {
'': 'assets/**/*'
},
// Development index populated with js and css targets:
index: {
'index.html': './markup/index.html'
}
};
// Populate gulp file:
gib.gulpfile(config, gulp);
// Extend build with custom gulp tasks here:
The Gib CLI reads a declarative config from a file gibberish.js
by default.
All it does right now is run the default task: development build and watch.
We'll build out a clean interface soon; for now it is recommended to use Gib
with gulp.
module.exports = {
// Destination for built assets:
build: 'build',
js: {
// JS target using browserify:
'scripts/site.js': {
browserify: true,
src: './src/index.js'
}
},
less: {
// Less target for vendor assets:
'styles/site-vendor.css': [
'../vendor/styles/bootstrap/bootstrap.less',
'../vendor/styles/font-awesome/font-awesome.less',
],
// Less target using custom watch pattern and single entry:
'styles/site.css': {
watch: './**/*.less',
src: './styles/index.less'
}
},
// Misc. static assets:
assets: {
'': 'assets/**/*'
},
// Development index populated with js and css targets:
index: {
'index.html': './markup/index.html'
}
};
Gib may be used to build a number of other projects, notably NGBP. To try this:
git clone https://github.com/ngbp/ngbp.git
clone ngbpnpm install --save-dev gib gulp
install gulp and gibgulpfile.js
gulp
start the development watcherFAQs
Declarative build tool powered by gulp.
We found that gib demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.