Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
gulp-css-usage
Advanced tools
A Gulp task which scans your JavaScript classes, including React JSX files support (.jsx/.js), as well as HTML files, your CSS files, and gives you a report of CSS coverage. i.e how many class names are needless and which are those class names.
A Gulp task which scans your JavaScript classes, including React JSX files support ( .jsx
/ .js
) as well as HTML files, your CSS files, and gives you a report of CSS coverage.
.i.e how many class names are needless and which are those class names.
In this way, you can tremendously accelerate the rendering time of your app by reducing network latency, loading and parsing time, as the CSS file is smaller with less properties to process and etc.
npm install gulp-css-usage --save-dev
// ECMAScript 5 code, using require()
var gulp = require('gulp');
var gulpCssUsage = require('gulp-css-usage').default;
// ECMAScript 6 code, using module import
import gulp from 'gulp';
import gulpCssUsage from 'gulp-css-usage';
gulp.task('check-css-usage', function () {
return gulp.src('/.../path/to/your/jsx/files/**/*.{jsx,js}')
.pipe(gulpCssUsage({css: '/.../path/to/your/css/file/style.css', babylon:[]}));
});
// selectors that matched complete strings in js files
needless selectors:
.myClass
#myId
// selectors that partialy matched an ES6 template string in js files
probably needless selectors:
.myClassTemplate
#myIdTemplate
mandatory Type: String
|| Array
The file path/pattern to the CSS file which this plug-in will test.
Supports multiple files either via glob pattern or via array of paths/patterns.
e.g.
gulpCssUsage({css: '/.../path/to/css/*.css'});
gulpCssUsage({css: ['/.../path/to/css/*.css', '/.../another/path/*.css', '/.../just/a/file/style.css']});
Type: Number
, (between 0-100)
If set, gulp-css-usage
will check the amount of unused selectors, and if the amount of it is above the threshold then it fails the task.
Type: Array:String
Default: ['jsx', 'flow', 'classProperties']
Array containing the plugins that you want to enable.
Since we're using babel 6.4+
and babylon
to parse and extract the class names from the jsx
files,
you might need to add which plug-ins to enable to parse your code if you're using more ES6
or ES7
features.
Example: if you're using objectRestSpread
capability which is not in ECMAScript2015
standards - you'll need to add it
For more available plug-ins, go to babel-babylon
Type: String
A Path to a report file. If set, gulp-css-usage
will write it's analysis both to console and to the file specified with a .txt
extension.
For bugs and issues, please use the Issues page.
For trouble in usage or unclear stuff, please use the awesome StackOverflow and tag your question with gulp-css-usage
, as well as other tags as you see fit
Sure! just fork this repository and join in!
FAQs
A Gulp task which scans your JavaScript classes, including React JSX files support (.jsx/.js), as well as HTML files, your CSS files, and gives you a report of CSS coverage. i.e how many class names are needless and which are those class names.
We found that gulp-css-usage demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.