
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
gulp-gh-pages
Advanced tools
gulp plugin to publish contents to Github pages
npm install --save-dev gulp-gh-pages
Define a deploy task in your gulpfile.js (as below) which can be used to push to gh-pages going forward.
var gulp = require('gulp');
var ghPages = require('gulp-gh-pages');
gulp.task('deploy', function() {
return gulp.src('./dist/**/*')
.pipe(ghPages());
});
Now, you should be able to call your task by doing:
gulp deploy
var ghPages = require('gulp-gh-pages');
options: Object
Return: Object (stream.Transform)
Type: String
Default: URL for the remote of the current dir (assumes a git repository)
By default gulp-gh-pages assumes the current working directory is a git repository and uses its remote url. If your gulpfile.js is not in a git repository, or if you want to push to a different remote url, you can specify it. Ensure you have write access to the repository.
Type: String
Default: "origin"
Git remote.
Type: String
Default: "gh-pages"
The branch where deploy will by done. Change to "master" for username.github.io projects.
Type: String
Default: .publish
Set the directory path to keep a cache of the repository. If it doesn't exist, gulp-gh-pages automatically create it.
Type: Boolean
Default: true
Allow you to make a build on the defined branch without pushing it to master. Useful for dry run.
Type: Boolean
Default: false
Force adding files to the gh-pages branch, even if they are ignored by .gitignore or .gitignore_global.
Type: String
Default: "Update [timestamp]"
Edit commit message.
Copyright (c) 2014 Micheal Benedict, 2015 Shinnosuke Watanabe
Licensed under the MIT License.
FAQs
gulp plugin to publish contents to Github pages
The npm package gulp-gh-pages receives a total of 3,436 weekly downloads. As such, gulp-gh-pages popularity was classified as popular.
We found that gulp-gh-pages demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.