
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Another mini task runner based on bach
This project is no longer maintained.
This tool as been drafted for some specific needs: use it if you like, enhance it if you don't. Else gulp is a better fit for you.
npm install --save gloup
With the folder structure below:
├─ myapp
└─ tasks
├─ bundle.js
├─ clean.js
├─ dev.js
├─ dist.js
├─ statics.js
└─ serve.js
myapp:
The executable main script (chmod +x myapp
)
#!/usr/bin/env node
var gloup = require('gloup')
gloup(__dirname + '/tasks')
tasks/clean.js: A task must export a function that return anything async-done supports (stream, promise, etc.)
var del = require('promised-del')
var resolve = require('path').resolve
module.exports = function () {
return del(['build'], {
cwd: resolve(__dirname, '../../')
})
}
tasks/dist.js: You can compose tasks using tasks name (based on filename) or function
var series = require('gloup').series(__dirname)
var parallel = require('gloup').parallel(__dirname)
module.exports = series([
'clean',
parallel('bundle','statics'),
function () {
return new Promise(function (resolve, reject) {
// ...
})
}
])
Now, myapp
can be used as a task runner
> myapp clean bundle serve
gloup ⇢ clean +0ms
gloup ⇠ clean +0ms
gloup ⇢ bundle +1s
gloup ⇠ bundle +6s
gloup ⇢ serve +0ms
gloup ⇠ serve +2ms
Start a composed task
> myapp dist
gloup ⇢ clean +0ms
gloup ⇠ clean +0ms
gloup ⇢ bundle +1s
gloup ⇢ statics +1s
gloup ⇠ bundle +6s
gloup ⇠ statics +6s
gloup ⇢ serve +0ms
gloup ⇠ serve +2ms
With node options:
> myapp --debug --es_staging serve
Debugger listening on port 5858
gloup ⇢ serve +0ms
gloup ⇠ serve +2ms
Quiet mode (remove gloup messages):
> myapp serve --quiet
Create a command line tool
#!/usr/bin/env node
var gloup = require('gloup')
// Path to the tasks folder
gloup(__dirname + '/tasks')
// Force node (iojs) flags
gloup(__dirname + '/tasks', {
flags: ['--es_staging']
})
Use series
and parallel
composer (just a convenient wrapper around bach) to compose tasks with name.
// gloup.series(taskFolder) -> {function} :
var series = require('gloup').series(__dirname)
// gloup.parallel(taskFolder) -> {function} :
var parallel = require('gloup').parallel(__dirname)
module.exports = series(['clean', parallel('bundle','statics')])
FAQs
Mini task runner based on bach (DEPRECATED)
The npm package gloup receives a total of 0 weekly downloads. As such, gloup popularity was classified as not popular.
We found that gloup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.