Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
grunt-contrib
Advanced tools
A collection of general use grunt tasks.
Install this grunt plugin next to your project's grunt.js gruntfile with: npm install grunt-contrib
Then add this line to your project's grunt.js
gruntfile:
grunt.loadNpmTasks('grunt-contrib');
See the docs dir.
In order to ensure a consistent configuration style, task submissions should retreive options with grunt.helper('options', this);
. This will search within the current task (or subtask) object for an options
key. If none is found, the helper will traverse up to the global options
entry, looking for a key that matches the task name.
task: {
subtask: {
options: { param: override },
},
}
options: {
task: {
param: default
}
}
Tests must be included with your submission. New tasks can be added to the config in test/grunt.js
, please see existing tests for guidance. Currently, testing with grunt is a bit cumbersome--this will be addressed in a future release.
(Nothing yet)
Copyright (c) 2012 "Cowboy" Ben Alman & contributors. Licensed under the MIT license.
FAQs
The entire grunt-contrib suite.
The npm package grunt-contrib receives a total of 97 weekly downloads. As such, grunt-contrib popularity was classified as not popular.
We found that grunt-contrib demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.