
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
grunt-s3-sync
Advanced tools
A streaming interface for uploading multiple files to S3
This plugin requires Grunt ~0.4.1
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install grunt-s3-sync --save-dev
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-s3-sync');
In your project's Gruntfile, add a section named s3-sync
to the data object passed into grunt.initConfig()
.
Type: String
Your AWS access key, mandatory.
Type: String
Your AWS secret, mandatory.
Type: String
The bucket to upload to, mandatory.
Type: Number
The maximum amount of files to upload concurrently.
Type: Number
The maximum number of times to retry uploading a file before failing. By default the value is 7.
Type: Object
Additional headers to include on each file.
Type: Function
A level database to use as a local cache for file uploads. This way, you can minimize the frequency you have to hit S3 and speed up the whole process considerably.
Needs to be passed as a function that returns the db instance - otherwise it'll get mangled by grunt's option API.
Type: Boolean
Pass this to a files object to enable gzip compression, e.g.
{
root: __dirname
src: '/**/*.html',
dest: '/',
gzip: true
}
Type: Number
This argument will set compression to the desired level. The default is 6 and the maximum you can set is 9. This is only useful if gzip: true
. You can find more about this here.
Type: String
This is a mandatory argument. Pass this to a files object to determine the "root" directory for uploads, e.g.
the following will upload the files in build
to the bucket's root:
The purpose is to determine the base path of the files so that relative paths from that base path root
can be preserved when uploaded to S3. Without it, we don't know relative to what to make the paths on S3.
{
root: __dirname + 'build'
src: 'build/**'
dest: '/'
}
The project is based on knox, all knox options are available in the
options
object.
Template strings in grunt will allow you to easily include values from other files. The below example demonstrates loading aws settings from another file, Where grunt-aws.json is just a json key:value file like package.json. (Special thanks to @nanek) This is important because you should never check in your S3 credentials to github! Load them from an external file that is outside of the repo.
grunt.initConfig({
aws: grunt.file.readJSON('~/grunt-aws.json'),
's3-sync': {
options: {
key: '<%= aws.key %>'
, secret: '<%= aws.secret %>'
, bucket: '<%= aws.bucket %>'
, db : db
},
your_target: {
files: [
{
root: __dirname
, src: 'tasks/**/*.js'
, dest: 'js/'
, gzip: true
},
{
root: 'dist'
, src: ['dist/**', '!dist/img/**'] // Don't compress images!
, dest: '/<%= pkg.version %>/'
, gzip: true
, compressionLevel: 9 // Max compression
},
{
root: __dirname
, src: 'Gruntfile.js'
, dest: 'Gruntfile.js'
}
]
},
},
})
In lieu of a formal styleguide, take care to maintain the existing coding style.
FAQs
A streaming interface for uploading multiple files to S3
The npm package grunt-s3-sync receives a total of 0 weekly downloads. As such, grunt-s3-sync popularity was classified as not popular.
We found that grunt-s3-sync demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.