
Security News
/Research
npm Phishing Email Targets Developers with Typosquatted Domain
A phishing attack targeted developers using a typosquatted npm domain (npnjs.com) to steal credentials via fake login pages - watch out for similar scams.
gulp-s3-uploader
Advanced tools
Version 1.0.6
Insprired by gulp-s3-upload use for uploading assets to Amazon S3 servers with v3 api.
npm install gulp-s3-uploader
Use same options as gulp-s3-upload but simplified.
import gulp from 'gulp';
import s3 from 'gulp-s3-uploader';
or in commonjs
const gulp = require('gulp');
const s3 = require('gulp-s3-uploader');
create client instance:
const s3Client = s3(clientConfig: ClientConfig);
type ClientConfig = Partial<S3ClientConfig> & {
key?: string; // short of accessKeyId
secret?: string; // short of secretAccessKey
accessKeyId?: string; // your access key
secretAccessKey?: string; // your secret key
}
see S3ClientConfig
at S3Client Configuration
then use it in gulp:
gulp.src('src/**/*')
.pipe(s3Client(pluginConfig: PluginConfig))
.pipe(...)
type PluginConfig = Partial<PutObjectCommandInput> & {
// the chartset added to mime type, then pass to Content-Type default: 'utf8'
charset?: string;
// the etag hash algorithm to hasha, default: 'md5'
etagHash?: hasha.AlgorithmName;
// if true, will not upload if there is no change
uploadNewFilesOnly?: boolean;
// this function could fix the PluginConfig params by keyname during runtime
maps?: Record<keyof PluginConfig, (keyname: string) => any>;
// transform each keyname before upload
keyTransform?: (keyname: string) => string;
// no change callback
onNoChange?: (keyname: string) => void;
// change callback
onChange?: (keyname: string) => void;
// new file callback
onNew?: (keyname: string) => void;
} & Record<string, any>
see PutObjectCommandInput
at PutObjectCommand
MIT
FAQs
Gulp plugin for uploading files to Amazon S3 with v3 api
We found that gulp-s3-uploader demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
A phishing attack targeted developers using a typosquatted npm domain (npnjs.com) to steal credentials via fake login pages - watch out for similar scams.
Security News
Knip hits 500 releases with v5.62.0, refining TypeScript config detection and updating plugins as monthly npm downloads approach 12M.
Security News
The EU Cyber Resilience Act is prompting compliance requests that open source maintainers may not be obligated or equipped to handle.