Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
grunt-contrib
Advanced tools
A collection of general use grunt tasks (currently in alpha).
Install this grunt plugin next to your project's grunt.js gruntfile with: npm install grunt-contrib
Then add this line to your project's grunt.js
gruntfile:
grunt.loadNpmTasks('grunt-contrib');
clean
Clear files and folders.
coffee
Compile CoffeeScript files into JavaScript.
handlebars
Compile handlebars templates to JST file.
jade
Compile Jade templates to HTML.
jst
Compile underscore templates to JST file.
less
Compile LESS files to CSS.
mincss
Minify CSS files.
requirejs
Optimize RequireJS projects using r.js.
stylus
Compile Stylus files into CSS.
zip
Zip files and folders.
options
Unified options retrieval
In order to ensure a consistent configuration style, task submissions should retreive their optional parameters with the included grunt helper, options.
Tests must be included with your submission. New tasks can be added to the config in test/grunt.js
, please see existing tests for guidance. Currently, testing with grunt is a bit cumbersome--this will be addressed in a future release.
npm install grunt -g
npm install
npm test
(Until v1.0.0, this will only be updated when major or breaking changes are made)*
2012/06/12 - v0.0.7 - Add RequireJS task.
2012/06/03 - v0.0.5 - Cleanup release with zip task addition.
2012/05/01 - v0.0.1 - Alpha release.
Copyright (c) 2012 "Cowboy" Ben Alman & contributors. Licensed under the MIT license.
FAQs
The entire grunt-contrib suite.
The npm package grunt-contrib receives a total of 97 weekly downloads. As such, grunt-contrib popularity was classified as not popular.
We found that grunt-contrib demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.