
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
grrr-gulpfile
Advanced tools
An opinionated and modular gulpfile. Made with ❤️ by Grrr, a digital creative agency in Amsterdam.
Basic installation and configuration is as follows:
Install this package in your project through yarn or npm:
npm install grrr-gulpfile --save-dev
gulp.json
config file (see below).@babel/preset-env
.npm install --save-dev @babel/preset-env
See the Babel docs for more information. Now specify the Babel config in the gulp.json
. See the advanced example for an example, or check the Babel docs for more information.
Run gulp by calling:
gulp --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'
Tip: save this as an npm script in your project's package.json
, for example:
"scripts": {
"watch": "gulp watch --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'",
"build": "gulp --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'",
"build:staging": "gulp --staging --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'",
"build:production": "BABEL_ENV=production gulp --production --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'"
},
npm run watch
npm run watch
npm run build:production
npm run build images
Check the examples for a basic and advanced gulp.json
config.
The project uses a few sensible defaults for Autoprefixer
, sass-lint
, eslint
(specs and ignores). These defaults can be overwritten:
sass
. These can be specified in the gulp.json
file in an autoprefixer
object within the sass
task.sass:lint
. Place a .sass-lint.yml
file in your project.eslint
rules. Place an .eslintrc
file in your project. You can additionally add an .eslintignore
for ignoring (wildcarded) folders or packages specific to your project.Specify which tasks to run by calling gulp like: gulp [task-name] --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'
. Or if speciefied gulp
as a script: yarn run gulp <task>
.
The individual tasks include:
browsersync
auto refresh and hot reloading in the browserclean
removes all built assetscopy
copies files that don't need processing (like fonts, videos and the favicon)eslint
lints js with opinionated rules, which can be overwritten by including your own .eslintrc
images
runs imagemin on all images in the config.paths.images.src
and saves the result to config.paths.images.dist
javascript:build
bundles JavaScript into a single bunle thru Browserify and transpiles it via Babeljavascript:watch
watches for changes and builds the bundle when changes are detectedjavascript:vendor
copies and uglifies vendor files (can also concatenate them)init
prints some debug infoicons
creates a svg spritemodernizr
checks js and scss source files for Modernizr tests and creates a custom Modernizr buildrevision
creates a revisioned filename for each static assetsass
compiles sass with globbingsass:lint
lints sass with opinionated rules, which can be overwritten by including your own .sass-lint.yml
The main tasks are:
build
runs all above tasks, except browsersync
(some tasks are dependent on the called environment)watch
runs the same tasks as default
but will retrigger when files are changed, and will start browsersyncFor more info, jump into the tasks folder.
To make changes to this gulpfile, it's best to replace the installed package in a real project with a locally linked development version. This can be done with both yarn or npm. We use yarn in this example; for npm check the npm docs . Inside the root of the grrr-gulpfile
repo, run:
yarn link
Inside the root of the project you want to test the gulpfile, run:
yarn link grrr-gulpfile
When you're done, you can publish the changes on npm
and unlink the development version by running the following inside the project:
yarn unlink grrr-gulpfile
yarn install
FAQs
An opiniated set of gulp tasks
We found that grrr-gulpfile demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.