Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
gulp-modular
Advanced tools
Boilerplate gulp tasks for quick project setup.
npm install gulp gulp-modular
gulpfile.js
(cf. graFiddle gulpfile.js), require both modules and define tasks and configuration:var gulp = require('gulp');
var modular = require('gulp-modular');
var tasks = ['bower', 'clean', 'sass', 'configScripts', 'browserSync', 'fonts', ...];
var config = {...};
modular(gulp, tasks, config);
Detailed documentation of our best practice workflow and the config object will be added soon.
bower:install
to install packages defined in the bower.json
.bower:prune
to remove packages that are not used anymore.images
collects graphics of different filetypes, flattens the paths and places them in a particular distribution folder.index
injects the transpiled JavaScript and CSS into the index.html
.jshint
runs jshint linting tool.clean
removes the distribution folder with all its content.statics
copies static files to a particular distribution folder.fonts
copies local fonts to a particular distribution folder.bowerFonts
copies fonts defined in the bower dependencies to a particular distribution folder.styles
to include your style files, choose one of the following two as your scss compiler:compass
compiles scss files to CSS files using compass.sass
compiles scss files to CSS using gulp-sass.bowerStyles
concats all styles from the bower dependencies and stores the file to a particular distribution folder.configScripts
creates a dedicated Angular module to provide a environment specific app configuration.karma
runs the karma test runner.protractor
runs protractor end-to-end tests.partials
collects all partials and combines them in a Angular module.scripts
connect all scripts, annotates, orders, concats and stores a the result to a file in a particular distribution folder.bowerScripts
concats all scripts from the bower dependencies and stores the file to a particular distribution folder.browserSync
provides a small HTTP server for local testing. It serves the requested file if available, the index.html
otherwise (to support Angular HTML5 mode)open
opens up the default web browser after the local HTTP server has started.watch
checks files for changes and triggers the reload (see above).mavenDeploy
creates a maven package and uploads it to a custom repository.mavenInstall
creates a snapshot maven package and installs it on the local machine.gitDeploy
saves the compiled files in a specified git branch and pushes this branch.FAQs
Boilerplate gulp tasks for quick project setup.
The npm package gulp-modular receives a total of 18 weekly downloads. As such, gulp-modular popularity was classified as not popular.
We found that gulp-modular demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.