Security News
tea.xyz Spam Plagues npm and RubyGems Package Registries
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
grrr-gulpfile
Advanced tools
Readme
An opinionated and modular gulpfile. Made with ❤️ by Grrr, a digital creative agency in Amsterdam.
Basic installation and configuration is as follows:
Install this package in your project through yarn or npm:
npm install grrr-gulpfile --save-dev
gulp.json
config file (see below).@babel/preset-env
.npm install --save-dev @babel/preset-env
See the Babel docs for more information. Now specify the Babel config in the gulp.json
. See the advanced example for an example, or check the Babel docs for more information.
Run gulp by calling:
gulp --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'
Tip: save this as an npm script in your project's package.json
, for example:
"scripts": {
"watch": "gulp watch --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'",
"build": "gulp --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'",
"build:staging": "gulp --staging --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'",
"build:production": "BABEL_ENV=production gulp --production --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'"
},
npm run watch
npm run watch
npm run build:production
npm run build images
Check the examples for a basic and advanced gulp.json
config.
The project uses a few sensible defaults for Autoprefixer
, sass-lint
, eslint
(specs and ignores). These defaults can be overwritten:
sass
. These can be specified in the gulp.json
file in an autoprefixer
object within the sass
task.sass:lint
. Place a .sass-lint.yml
file in your project.eslint
rules. Place an .eslintrc
file in your project. You can additionally add an .eslintignore
for ignoring (wildcarded) folders or packages specific to your project.Specify which tasks to run by calling gulp like: gulp [task-name] --cwd . --gulpfile 'node_modules/grrr-gulpfile/gulpfile.js'
. Or if speciefied gulp
as a script: yarn run gulp <task>
.
The individual tasks include:
browsersync
auto refresh and hot reloading in the browserclean
removes all built assetscopy
copies files that don't need processing (like fonts, videos and the favicon)eslint
lints js with opinionated rules, which can be overwritten by including your own .eslintrc
images
runs imagemin on all images in the config.paths.images.src
and saves the result to config.paths.images.dist
javascript:build
bundles JavaScript into a single bunle thru Browserify and transpiles it via Babeljavascript:watch
watches for changes and builds the bundle when changes are detectedjavascript:vendor
copies and uglifies vendor files (can also concatenate them)init
prints some debug infoicons
creates a svg spritemodernizr
checks js and scss source files for Modernizr tests and creates a custom Modernizr buildrevision
creates a revisioned filename for each static assetsass
compiles sass with globbingsass:lint
lints sass with opinionated rules, which can be overwritten by including your own .sass-lint.yml
The main tasks are:
build
runs all above tasks, except browsersync
(some tasks are dependent on the called environment)watch
runs the same tasks as default
but will retrigger when files are changed, and will start browsersyncFor more info, jump into the tasks folder.
To make changes to this gulpfile, it's best to replace the installed package in a real project with a locally linked development version. This can be done with both yarn or npm. We use yarn in this example; for npm check the npm docs . Inside the root of the grrr-gulpfile
repo, run:
yarn link
Inside the root of the project you want to test the gulpfile, run:
yarn link grrr-gulpfile
When you're done, you can publish the changes on npm
and unlink the development version by running the following inside the project:
yarn unlink grrr-gulpfile
yarn install
FAQs
An opiniated set of gulp tasks
The npm package grrr-gulpfile receives a total of 22 weekly downloads. As such, grrr-gulpfile popularity was classified as not popular.
We found that grrr-gulpfile demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
Security News
As cyber threats become more autonomous, AI-powered defenses are crucial for businesses to stay ahead of attackers who can exploit software vulnerabilities at scale.
Security News
UnitedHealth Group disclosed that the ransomware attack on Change Healthcare compromised protected health information for millions in the U.S., with estimated costs to the company expected to reach $1 billion.