
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
gulp-dev-csh
Advanced tools
gulp-dev-csh is a gulp plugin to replace script, css tags in html files easily before build, minify, concat from development to production.
gulp-dev-csh provides simple file renaming methods.
var devCSH = require('gulp-dev-csh');
gulp.task('dev', function(){
gulp.src('www/index1.html')
.pipe(devCSH.product())
.pipe(gulp.dest('dist'));
});
```html
<head>
<meta charset="utf-8">
<meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=no, width=device-width">
<meta http-equiv="Content-Security-Policy" content="default-src * 'unsafe-eval' 'unsafe-inline' data:">
<title>Gulp dev html</title>
<!--"gulp-dev" tag marks its content will be removed when you run gulp dev-->
<gulp-dev>
<link href='css/font.css' rel='stylesheet' type='text/css'>
<link href="lib/ionic/css/ionic.css" rel="stylesheet">
<link href="lib/ion-md-input/css/ion-md-input.min.css" rel="stylesheet">
<link href="lib/ionic-material/dist/ionic.material.min.css" rel="stylesheet">
<link href="css/style.css" rel="stylesheet">
<link rel="stylesheet" href="css/angular-material.min.css">
<script src="js/moment-with-locales.min.js"></script>
<script src="lib/ionic/js/ionic.bundle.js"></script>
<script src="js/angular-material.min.js"></script>
<script src="js/angular-animate.min.js"></script>
<script src="js/angular-aria.min.js"></script>
<script src="js/angular-messages.min.js"></script>
<script src="js/angular-material-icons.min.js"></script>
<script src="lib/ionic-material/dist/ionic.material.min.js"></script>
<script src="lib/ion-md-input/js/ion-md-input.min.js"></script>
<!-- cordova script (this will be a 404 during development) -->
<script src="js/ng-cordova.js"></script>
<script src="cordova.js"></script>
<!-- your app's js -->
<script src="lib/canvasjs/canvasjs.min.js"></script>
<script src="js/parse-1.6.7.min.js"></script>
<script src="js/config.js"></script>
<!--script src="js/i18_vi.js"></script-->
<script src="js/app.js"></script>
<script src="js/services.js"></script>
<script src="js/controllers.js"></script>
<script src="js/tmhDynamicLocale.min.js"></script>
</gulp-dev>
<!--
"gulp-production" tag marks its content will be replaced when you run gulp dev
"gulp-production" will be removed
"gulp-link" will be replaced to "link",
"gulp-script" will be replaced to "script"
-->
<gulp-production>
<gulp-link href="css/all.min.css" rel="stylesheet" type="text/css">
<gulp-script src="js/all.min.js"></gulp-script>
</gulp-production>
</head>
## Notes
## License
[MIT License](http://en.wikipedia.org/wiki/MIT_License)
FAQs
Replace script, css from development to production
We found that gulp-dev-csh demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.