Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
grunt-file-rev
Advanced tools
Static file asset revisioning through content hashing
If you haven't used grunt before, be sure to check out the Getting Started guide.
From the same directory as your project's Gruntfile and package.json, install this plugin with the following command:
npm install grunt-file-rev --save-dev
Once that's done, add this line to your project's Gruntfile:
grunt.loadNpmTasks('grunt-file-rev');
If the plugin has been installed correctly, running grunt --help
at the command line should list the newly-installed plugin's task or tasks. In addition, the plugin should be listed in package.json as a devDependency
, which ensures that it will be installed whenever the npm install
command is run.
Use the rev task together with yeoman/grunt-usemin for cache busting of static files in your app. This allows them to be cached forever by the browser.
In your project's Gruntfile, add a section named rev
to the data object passed into grunt.initConfig()
.
grunt.initConfig({
rev: {
options: {
algorithm: 'md5',
length: 8
},
assets: {
files: [{
src: [
'img/**/*.{jpg,jpeg,gif,png}',
'fonts/**/*.{eot,svg,ttf,woff}'
]
}]
}
},
})
Type: String
Default value: 'md5'
algorithm
is dependent on the available algorithms supported by the version of OpenSSL on the platform. Examples are 'sha1'
, 'md5'
, 'sha256'
, 'sha512'
, etc. On recent releases, openssl list-message-digest-algorithms
will display the available digest algorithms.
Type: Number
Default value: 8
The number of characters of the file content hash to prefix the file name with.
This will rename app.js
and app.css
with an 8 character long hash prefix. For example js/9becff3a.app.js
and css/ae35dd05.app.css
. The hash value depends on the file contents.
grunt.initConfig({
rev: {
files: {
src: ['scripts/app.js', 'css/app.css']
}
}
})
Change the algorithm or length to style the generated asset file names. Note that the usemin
companion task requires at least one anycase hexadecimal character to prefix the file name.
grunt.initConfig({
rev: {
options: {
algorithm: 'sha1',
length: 4
},
files: {
src: ['**/*.{js,css,png,jpg}']
}
}
})
In lieu of a formal styleguide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code using grunt.
(Nothing yet)
FAQs
Static file asset revisioning through content hashing
The npm package grunt-file-rev receives a total of 155 weekly downloads. As such, grunt-file-rev popularity was classified as not popular.
We found that grunt-file-rev demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.