Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
gulp-htmlhint
Advanced tools
First, install gulp-htmlhint
as a development dependency:
npm install --save-dev gulp-htmlhint
Then, add it to your gulpfile.js
:
var htmlhint = require("gulp-htmlhint");
gulp.src("./src/*.html")
.pipe(htmlhint())
See all rules here: https://github.com/yaniswang/HTMLHint/wiki/Rules
If options is empty, task use standard options.
Type: String
Default value: null
If this filename is specified, options and globals defined there will be used. Task and target options override the options within the htmlhintrc
file. The htmlhintrc
file must be valid JSON and looks something like this:
{
"tag-pair": true,
}
var htmlhint = require("gulp-htmlhint");
gulp.src("./src/*.html")
.pipe(htmlhint('.htmlhintrc'))
Type: Array
Optional
Default value: null
Array that contains all user defined custom rules. Adding a custom rule with this param doesn't require to add it's id in the htmlhintrc
file.
All defined custom rules inside this array should be a valid object and looks like this:
{
id: 'my-custom-rule',
description: 'Custom rule definition',
init: function(parser, reporter){
//Code goes here
}
}
Here is an example:
var htmlhint = require("gulp-htmlhint");
var customRules = [];
customRules.push({
id: 'my-custom-rule',
description: 'Custom rule definition',
init: function(parser, reporter){
//Code goes here
}
});
gulp.src("./src/*.html")
.pipe(htmlhint('.htmlhintrc', customRules))
Note: You can call htmlhint
function with 4 ways:
options
param alone.customRules
param alone (task will only use custom rules options).options
and customRules
params defined.var htmlhint = require("gulp-htmlhint");
gulp.src("./src/*.html")
.pipe(htmlhint())
.pipe(htmlhint.reporter())
Use this reporter if you want your task to fail in case of a HTMLHint Error (fails on first file). It also prints a summary of all errors in the first bad file.
var htmlhint = require("gulp-htmlhint");
gulp.src("./src/*.html")
.pipe(htmlhint())
.pipe(htmlhint.failOnError())
Use this reporter if you want your task to fail in case of a HTMLHint Error (collects statistics from all files and then fails). It also prints a summary of all errors in the first bad file.
var htmlhint = require("gulp-htmlhint");
gulp.src("./src/*.html")
.pipe(htmlhint())
.pipe(htmlhint.failAfterError())
Optionally, you can pass the a config object (works for both fail reporters)
Plugin options:
suppress
When set to true
, it does not display file errors on failure.
Use in conjunction with the default and/or custom reporter(s).
Prevents duplication of error messages when used along with another reporter.
var htmlhint = require("gulp-htmlhint");
gulp.src("./src/*.html")
.pipe(htmlhint())
.pipe(htmlhint.reporter("htmlhint-stylish"))
.pipe(htmlhint.failOnError({ suppress: true }))
gulp-reporter used in team project, it fails only when error belongs to the current author of git.
FAQs
A plugin for Gulp
We found that gulp-htmlhint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.