Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
grunt-sprockets-directives
Advanced tools
Dependency management using Sprockets directives.
This plugin requires Grunt ~0.4
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install grunt-sprockets-directives --save-dev
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-sprockets-directives');
You can use the following directives to declare dependencies in asset source files.
For directives that take a path argument, you may specify either a logical path or a relative path. Relative paths begin with ./
and reference files relative to the location of the current file.
require
Directiverequire
path inserts the contents of the asset source file specified by path. If the file is required multiple times, it will appear in the bundle only once.
include
Directiveinclude
path works like require
, but inserts the contents of the specified source file even if it has already been included or required.
require_directory
Directiverequire_directory
path requires all source files of the same format in the directory specified by path. Files are required in alphabetical order.
require_tree
Directiverequire_tree
path works like require_directory
, but operates recursively to require all files in all subdirectories of the directory specified by path.
require_self
Directiverequire_self
tells Sprockets to insert the body of the current source file before any subsequent require
or include
directives.
stub
Directivestub
path allows dependency to be excluded from the asset bundle. The path must be a valid asset and may or may not already be part of the bundle. Once stubbed, it is blacklisted and can't be brought back by any other require
.
In your project's Gruntfile, add a section named directives
to the data object passed into grunt.initConfig()
. Only one src
file is allowed per target.
grunt.initConfig({
directives: {
options: {
// Task-specific options go here.
},
your_target: {
// Target-specific file lists and/or options go here.
},
},
});
This task will resolve all dependencies, concatenate files using Grunt concat. Aside from the options outlined below, all concat options are accepted as well.
Type: String
Default value: <cwd of your_target.src>
Relative dependencies will be matched relative to this path.
In this example, the default options are used to resolve dependencies. All dependencies are concatenated using concats default options.
grunt.initConfig({
directives: {
files: { 'dest/output': 'src/input' },
},
});
In this example, custom options are used to resolve dependencies. The relative path for all dependencies is src
. When concatenating, an intro.txt
and outro.txt
are added.
grunt.initConfig({
directives: {
options: {
banner : grunt.file.read('intro.txt'),
footer : grunt.file.read('outro.txt')
},
files: {
options : { cwd: './src' },
src : 'src/input',
dest : 'dest/output'
},
},
});
In lieu of a formal styleguide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code using Grunt.
** 0.1.0 (February 20, 2014)
This project is heavily based on sprockets and sprockets-chain.
Copyright 2014 Kinvey, Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
FAQs
Dependency management using Sprockets directives.
The npm package grunt-sprockets-directives receives a total of 2 weekly downloads. As such, grunt-sprockets-directives popularity was classified as not popular.
We found that grunt-sprockets-directives demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.