
Research
/Security News
npm Malware Campaign Uses Adspect Cloaking to Deliver Malicious Redirects
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.
gobble-unpackage
Advanced tools
Use only the needed files from NPM/SPM/CommonJS modules in your GobbleJS workflow
Use only the needed files from NPM/SPM/CommonJS modules in your GobbleJS workflow.
There are a myriad of javascript package managers our there: Bower, NPM, JSPM, SPM, Volo, Meteor, Composer and so on.
The goal of gobble-unpackage is allowing you, the web developer, to use any
of these package managers, then use GobbleJS to filter out the files you need
I assume you already know the basics of Gobble.
npm i -D gobble-unpackage
In your gobblefile, run the package gobble transform, like so:
var gobble = require( 'gobble' );
module.exports = gobble( directory_with_a_javascript_package ).transform( 'unpackage' );
The output node will contain only the files described by the main property of
the package.json file in the package. CSS and Less are managed, as well as
the SPM format for package.json.
If you want to override any values of the package's package.json, specify those
overrides as options to the 'unpackage' transform:
module.exports = gobble( directory_with_a_javascript_package )
.transform( 'unpackage', { main: './build/foobar.js' });
A more ellaborate example, to concatenate some JS libraries:
npm install jquery
npm install bootstrap
npm install leaflet
var gobble = require( 'gobble' );
var libs = gobble([
gobble('node_modules/leaflet' ).transform('unpackage'),
gobble('node_modules/jquery' ).transform('unpackage'),
gobble('node_modules/bootstrap').transform('unpackage', {
main: './dist/js/bootstrap.js'
})
]);
var libJS = libs.transform('concat', { dest: 'libs.js', files: '**/*.js' });
var libCSS = libs.transform('concat', { dest: 'libs.css', files: '**/*.css' });
module.exports = gobble([ libJS, libCSS ]);
gobble-unpackage will not:
require() calls as some CommonJS modules expect.js in the filename of for the main property"THE BEER-WARE LICENSE":
<ivan@sanchezortega.es> wrote this file. As long as you retain this notice you
can do whatever you want with this stuff. If we meet some day, and you think
this stuff is worth it, you can buy me a beer in return.
FAQs
Use only the needed files from NPM/SPM/CommonJS modules in your GobbleJS workflow
The npm package gobble-unpackage receives a total of 0 weekly downloads. As such, gobble-unpackage popularity was classified as not popular.
We found that gobble-unpackage demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads