
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
gulp-plumber
Advanced tools
Prevent pipe breaking caused by errors from gulp plugins
This :monkey:-patch plugin is fixing issue with Node Streams piping. For explanations, read this small article.
Briefly it replaces pipe method and removes standard onerror handler on error event, which unpipes streams on error by default.
First, install gulp-plumber as a development dependency:
npm install --save-dev gulp-plumber
Then, add it to your gulpfile.js:
var plumber = require('gulp-plumber');
var coffee = require('gulp-coffee');
gulp.src('./src/*.ext')
.pipe(plumber())
.pipe(coffee())
.pipe(gulp.dest('./dist'));
Returns Stream, that fixes pipe methods on Streams that are next in pipeline.
Type: Object / Function
Default: {}
Sets options described below from its properties. If type is Function it will be set as errorHandler.
Type: Boolean
Default: true
Monkeypatch pipe functions in underlying streams in pipeline.
Type: Boolean / Function
Default: true
Handle errors in underlying streams and output them to console.
function - it will be attached to stream on('error').false - error handler will not be attached.true - default error handler will be attached.This method will return default behaviour for pipeline after it was piped.
var plumber = require('gulp-plumber');
gulp.src('./src/*.scss')
.pipe(plumber())
.pipe(sass())
.pipe(uglify())
.pipe(plumber.stop())
.pipe(gulp.dest('./dist'));
gulp-notify is a Gulp plugin that sends messages to the notification center on your operating system. It can be used to display notifications for various events, including errors. Unlike gulp-plumber, gulp-notify focuses on providing notifications rather than preventing pipe breaking.
gulp-util is a collection of utility functions for Gulp plugins, including error handling. It provides a way to log errors and other messages. However, gulp-util has been deprecated, and its functionalities have been split into smaller, more focused packages. It does not prevent pipe breaking like gulp-plumber.
gulp-if is a Gulp plugin that conditionally pipes files through a function. It can be used to handle errors conditionally, but it does not provide the same level of error handling and prevention as gulp-plumber. It is more focused on conditional task execution.
FAQs
Prevent pipe breaking caused by errors from gulp plugins
The npm package gulp-plumber receives a total of 81,220 weekly downloads. As such, gulp-plumber popularity was classified as popular.
We found that gulp-plumber demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.