Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
gulp-maven-deploy
Advanced tools
A Gulp wrapper for the maven-deploy module. Enables you to have projects which are built with Gulp, but deploys to Maven repositories.
All the samples below require a basic understanding of Gulp and Maven. Please look at the documentation for those projects for details. This readme refers to 1.x versions. If you are still using the 0.x versions, have a look into the 0.x support branch.
$ npm install gulp-maven-deploy --save-dev
Below are two configuration samples:
Configuring a task for deploying to a Maven proxy
var gulp = require('gulp'),
maven = require('gulp-maven-deploy');
zip = require('gulp-zip');
gulp.task('deploy', function() {
return gulp.src('.')
.pipe(zip('my-artifact.war'))
.pipe(maven.deploy({
'groupId': 'com.mygroup',
'repositories': [{
'id': 'some-repo-id',
'url': 'http://some-repo/url'
}]
}))
});
A task running a local Maven install:
var gulp = require('gulp'),
maven = require('gulp-maven-deploy'),
zip = require('gulp-zip');
gulp.task('deploy-local', function() {
return gulp.src('.')
.pipe(zip('my-artifact.war'))
.pipe(maven.install({
'groupId': 'com.mygroup',
}))
});
Note: A local install in Maven means it is only available on your machine. A deployment is different as it means you ship the artifact off to some remote repository.
With gulp-maven-deploy
version 1.0.0 we want to go one more step into the
direction of a well performing gulp plugin. Following the single responsibility
principle this plugin will only perform the deploy part in the future.
options = {config: { ... }}
to options = { ... }
artifactId
and type
from config. They are now extracted from the file name. To influence
them, rename the file in the gulp stream before piping it to gulp-maven-deploy
finish
or error
to get notified about successful or unsuccessful deploysThere is a complete example project if you checkout the example directory.
$ cd example
$ npm install
$ ./node_modules/.bin/gulp
This will install gulp and allow you to run the sample. Gulp will run with with a local deploy configuration
by default. You should see an artifact deployed to your local M2_HOME
repository.
$ npm test
All pull requests and issues are welcome!
Big thanks to Gregers for making the maven-deploy module.
FAQs
Simple gulp plugin for the maven-deploy module
We found that gulp-maven-deploy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.