
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
gulp-amp-svg-merge
Advanced tools
Gulp plugin for merging Amplience SVG metadata into SVG files
$ npm install --save svg-metadata-merge
var ampSvgMerge = require('gulp-amp-svg-merge');
gulp.src('svg/*.svg')
.pipe(ampSvgMerge({
svgDir: './svg',
subsFileExt: '.metadata',
headerFileExt: '.header'
}))
.pipe(gulp.dest('svg/merged'));
svgDir - location of the metadata and header files.
subsFileExt - file extension to identify the metadata substitutions file.
headerFileExt - file extension to identify the header attributes file.
The metadata and header files much have the same filename as the target SVG (plus the additional file extension identifier).
These examples are a guide to what should be provided to the module and what the expected output will be.
The input file should be a valid SVG file like this:
<svg version="1.1" xmlns:svg="http://www.w3.org/2000/svg"
xmlns:ampsvg="http://media.amplience.com/2016/svg-extensions"
xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="200px"
height="200px" viewBox="0 0 200 200" enable-background="new 0 0 200 200" xml:space="preserve">
<metadata>
</metadata>
<polygon points="19,6.4 17.6,5 12,10.6 6.4,5 5,6.4 10.6,12 5,17.6 6.4,19 12,13.4 17.6,19 19,17.6 13.4,12"/>
</svg>
Or if there is existing metadata:
<svg version="1.1" xmlns:svg="http://www.w3.org/2000/svg" xmlns:ampsvg="http://media.amplience.com/2016/svg-extensions"
xmlns:nonamp="http://media.amplience.com/2016/svg-extensions"
xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="200px"
height="200px" viewBox="0 0 200 200" enable-background="new 0 0 200 200" xml:space="preserve">
<metadata>
<nonamp:stuff>
<nonamp:substitutions type="test-type" value="I am a test">
</nonamp:substitutions>
</nonamp:stuff>
</metadata>
<polygon points="19,6.4 17.6,5 12,10.6 6.4,5 5,6.4 10.6,12 5,17.6 6.4,19 12,13.4 17.6,19 19,17.6 13.4,12"/>
</svg>
A metadata file can be created to merge in Amplience specific metadata. The contents of the metadata file should look like this:
<ampsvg:metadata>
<ampsvg:substitutions>
<ampsvg:substitute type="set-innerText" target="//svg:text[@id='text01']" value="10% off" />
</ampsvg:substitutions>
<ampsvg:fonts>
<ampsvg:font font-family="/playground/Roboto" />
</ampsvg:fonts>
</ampsvg:metadata>
Note: <metadata> should not be included in this file.
A header file can be created to merge in svg element attributes. Th file should contain:
<svg xmlns:svg="http://www.w3.org/2000/svg" xmlns:ampsvg="http://media.amplience.com/2016/svg-extensions" width="200px" height="200px" viewBox="0 0 200 200"></svg>
Apache-2.0 © Amplience
FAQs
Gulp plugin for merging Amplience SVG metadata into SVG files
The npm package gulp-amp-svg-merge receives a total of 0 weekly downloads. As such, gulp-amp-svg-merge popularity was classified as not popular.
We found that gulp-amp-svg-merge demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.