
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
gulp-atom-electron
Advanced tools
Deprecated
Please use the official way of requiring Electron: https://electronjs.org/docs/tutorial/first-app
--
npm install --save-dev gulp-atom-electron
You can use this module in two distinct ways: to package your application and/or to download a version of Electron to disk.
You should source your app's files using gulp.src
and pipe them through
gulp-atom-electron
. The following task will create your application in
the app
folder, ready for launch.
var gulp = require("gulp");
var symdest = require("gulp-symdest");
var electron = require("gulp-atom-electron");
gulp.task("default", function () {
return gulp
.src("src/**")
.pipe(electron({ version: "0.34.1", platform: "darwin" }))
.pipe(symdest("app"));
});
Note: It is important to use gulp-symdest
only because of the OS X
platform. An application bundle has symlinks within and if you use gulp.dest
to pipe the built app to disk, those will be missing. symdest
will make
sure symlinks are taken into account.
Finally, you can always pipe it to a zip archive for easy distribution. joaomoreno/gulp-vinyl-zip is recommended:
var gulp = require("gulp");
var zip = require("gulp-vinyl-zip");
var electron = require("gulp-atom-electron");
gulp.task("default", function () {
return gulp
.src("src/**")
.pipe(electron({ version: "0.34.1", platform: "darwin" }))
.pipe(zip.dest("app-darwin.zip"));
});
There's also a very handy export electron.dest()
function that
makes sure you always have the exact version of Electron in a directory:
var gulp = require("gulp");
var electron = require("gulp-atom-electron");
gulp.task("default", function () {
return electron.dest("electron-build", {
version: "0.34.1",
platform: "darwin",
});
});
This will place a vanilla Electron build into the electron-build
directory.
If you run it consecutively and it detects that the version in the destination directory
is the intended one, it will end up in a no-op. Else it will download the provided version
and replace it.
You must provide the following options:
version
- the Electron version to useplatform
- kind of OS (darwin
, linux
, win32
)The following options are optional:
quiet
- suppress a progress bar when downloading
token
- GitHub access token(to avoid request limit. You can grab it here)
arch
- the processor architecture (ia32
, x64
)
Windows
winIcon
- path to an .ico
filecompanyName
- company namecopyright
- copyright statementDarwin
darwinIcon
- path to an .icns
filedarwinHelpBookFolder
- the CFBundleHelpBookFolder
valuedarwinHelpBookName
- the CFBundleHelpBookName
valuedarwinBundleDocumentTypes
- (reference) array of dictionaries, each containing the following structure:
name
- the CFBundleTypeName
valuerole
- the CFBundleTypeRole
valueostypes
- the CFBundleTypeOSTypes
value, a string
arrayutis
- the LSItemContentTypes
value, a string
arrayextensions
- the CFBundleTypeExtensions
value, a string
array of file extensionsiconFile
- the CFBundleTypeIconFile
valuedarwinForceDarkModeSupport
- Forces Mojave dark mode support to be enabled for older Electron versionsLinux
linuxExecutableName
- overwrite the name of the executable in LinuxFAQs
gulp plugin for packaging Electron applications
The npm package gulp-atom-electron receives a total of 318 weekly downloads. As such, gulp-atom-electron popularity was classified as not popular.
We found that gulp-atom-electron demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.