
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
gulp-remove
Advanced tools
未运行 gulp 时删除的文件无法通过 unlink 同步删除,本插件支持删除多余的构建产物(仅一对一删除)。
$ npm install --save-dev gulp-remove
const gulp = require('gulp');
const gulpRemove = require('gulp-remove');
const DIST = 'dist';
const { manifest, remove } = gulpRemove('js', DIST);
exports.default = () => (
gulp.src('src/*.js')
.pipe(manifest())
.pipe(gulp.dest(DIST))
.on('end', function () {
// 所有文件都编译完了
remove();
})
);
Type: string
作为 manifest 文件名,每一个 task 都应该有一个唯一的 name。
Type: string
构建相对目录,用于删除源码未跟踪的已经删除的文件对应的构建结果。
Type: object
Type: string
Default: process.cwd()
Type: object
Type: function
Return: NodeJS.ReadWriteStream
对比前一次构建的 manifest,生成本次构建的 manifest。
Type: function
Return: void
删除文件并将新的 manifest 写入文件。
FAQs
We found that gulp-remove demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.