
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
gulp-findreplace
Advanced tools
A gulp plugin that streamingly replaces matching strings with provided replacement string ⚡️
First, install gulp-findreplace as a development dependency:
npm install --save-dev gulp-findreplace
Then, add it to your gulpfile.js:
var freplace = require('gulp-findreplace');
gulp.task('replaceIt', function(){
gulp.src(['example.txt'])
.pipe(freplace(/foo(.{3})/g, 'foo'))
.pipe(gulp.dest('build/example.txt'));
});
var freplace = require('gulp-findreplace');
gulp.task('replaceIt', function(){
gulp.src(['example.txt'])
.pipe(freplace('love', 'code'))
.pipe(gulp.dest('build/example.txt'));
});
You can also refer to an example provided in ./examples directory.
gulp-findreplace works with streams and even if it encounter a file as a buffer it converts it to a stream then operates with provided string or regex.
Type: String
The string to search for.
Type: String
The replacement string or function. If replacement is a function, it will be called once for each match and will be passed the string that is to be replaced.
Type: RegExp
The regex pattern to search for. See the [MDN documentation for RegExp] for details.
Type: String
FAQs
Gulp plugin to find and replace stuff.
We found that gulp-findreplace demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.