
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
gulp-changed
Advanced tools
Only pass through changed files
No more wasting precious time on processing unchanged files.
By default it's only able to detect whether files in the stream changed. If you require something more advanced like knowing if imports/dependencies changed, create a custom comparator, or use another plugin.
npm install --save-dev gulp-changed
import gulp from 'gulp';
import changed from 'gulp-changed';
import ngAnnotate from 'gulp-ng-annotate'; // Just as an example
const SOURCE = 'src/*.js';
const DESTINATION = 'dist';
exports.default = () => (
gulp.src(SOURCE)
.pipe(changed(DESTINATION))
// `ngAnnotate` will only get the files that
// changed since the last time it was run
.pipe(ngAnnotate())
.pipe(gulp.dest(DESTINATION))
);
Type: string | Function
Destination directory. Same as you put into gulp.dest().
This is needed to be able to compare the current files with the destination files.
Can also be a function returning a destination directory path.
Type: object
Type: string
Default: process.cwd()
Working directory the folder is relative to.
Type: string
Extension of the destination files.
Useful if it differs from the original, like in the example below:
export const jade = () => (
gulp.src('src/**/*.jade')
.pipe(changed('app', {extension: '.html'}))
.pipe(jade())
.pipe(gulp.dest('app'))
);
Type: Function
Default: compareLastModifiedTime
Function that determines whether the source file is different from the destination file.
Named imports:
compareLastModifiedTime - Compare modification times (default)compareContents - Compare file contents (only useful for files that are copied without transformation)import {compareContents} from 'gulp-changed';
// compareContents only works when files are copied without transformation
export const images = () => (
gulp.src('src/images/**/*')
.pipe(changed('dist/images', {hasChanged: compareContents}))
.pipe(gulp.dest('dist/images'))
);
You can also specify a custom comparator function, which will receive the following arguments:
sourceFile (Vinyl file object)destinationPath (string) - The destination for sourceFile as an absolute pathThe function is expected to return sourceFile | Promise<sourceFile> if it passes some comparison or undefined | Promise<undefined>. Examples.
Type: Function
Function to transform the path to the destination file. Should return the absolute path to the (renamed) destination file.
Useful if you rename your file later on, like in the below example:
export const marked = () => (
gulp.src('src/content/about.md')
.pipe(changed('dist', {
transformPath: newPath => path.join(path.dirname(newPath), path.basename(newPath, '.md'), 'index.html')
}))
.pipe(marked())
.pipe(rename(newPath => path.join(path.dirname(newPath), path.basename(newPath, '.md'), 'index.html')))
.pipe(gulp.dest('dist'))
);
If you're looking to process source files in-place without any build output (formatting, linting, etc), have a look at gulp-changed-in-place.
FAQs
Only pass through changed files
The npm package gulp-changed receives a total of 35,949 weekly downloads. As such, gulp-changed popularity was classified as popular.
We found that gulp-changed demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.