
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
grunt-quick-build
Advanced tools
#grunt-quick-build
构建seajs模块。提取替换ID,压缩混淆。
This plugin requires Grunt ~0.4.5
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install grunt-quick-build --save-dev
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-quick-build');
grunt.initConfig({
build: {
options: {
uglify: true
},
main: {
id: "modules",
expand: true,
cwd: "./src/modules",
src: ["*/src/**/*.js", "*/src/**/*.tpl", "*/index.js","!*/test/"],
dest: "./dest",
}
}
});
类型 : String
默认值 : "modules"
模块id前缀。
类型 : Boolean
默认值 : "true"
是否开启压缩混淆。
类型 : Object
默认值 : "{}"
压缩混淆options选项,详情请参考_http://lisperator.net/uglifyjs/compress_
类型 : Object
默认值 : "{ indent_level: 2, //tab为2个空格 ascii_only: true//unicode编码输出 }"
压缩混淆options选项,详情请参考_http://lisperator.net/uglifyjs/codegen_
类型 : String
默认值 : ""
代表模块模块id前缀,若设置将会覆盖options中的id属性。就近原则
FAQs
grunt-quick-build
We found that grunt-quick-build demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.