Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
gulp-maven-deploy
Advanced tools
A Gulp wrapper for the maven-deploy module. Enables you to have projects which are built with Gulp, but deploys to Maven repositories.
All the samples below requires a basic understanding of Gulp and Maven. Please look at the documentation for those projects for details.
$ npm install gulp-maven-deploy --save-dev
Below are two configuration samples:
Configuring a task for deploying to a Maven proxy
var maven = require('gulp-maven-deploy');
gulp.task('deploy', function(){
gulp.src('.')
.pipe(maven.deploy({
'config': {
'groupId': 'com.mygroup',
'type': 'war',
'repositories': [
{
'id': 'some-repo-id',
'url': 'http://some-repo/url'
}
]
}
}))
});
A task running a local Maven install:
var maven = require('gulp-maven-deploy');
gulp.task('deploy-local', function(){
gulp.src('.')
.pipe(maven.install({
'config': {
'groupId': 'com.mygroup',
'type': 'war'
}
}))
});
Note: A local install in Maven means it is only available on your machine. A deployment is different as it means you ship the artifact off to some remote repository.
There is a complete sample project if you checkout the samples directory.
$ npm install
$ ./node_modules/.bin/gulp
This will install gulp and allow you to run the sample. Gulp will run with with a local deploy configuration. You should see an artifact in the dist folder and a file deployed to your local M2_HOME repository.
$ npm test
All pull requests and issues are welcome!
Big thanks to Gregers for making the maven-deploy module.
FAQs
Simple gulp plugin for the maven-deploy module
The npm package gulp-maven-deploy receives a total of 395 weekly downloads. As such, gulp-maven-deploy popularity was classified as not popular.
We found that gulp-maven-deploy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.