
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
gulp-ultimate-dependent
Advanced tools
Gulp plugin to find the named ultimate dependent in the dependency graph.
Gulp plugin to find the named ultimate dependent in the dependency graph.
When you're running an incremental build system, you usually only want to build the files that change. For frontend applications with multiple main source files (Webpack entry points, individual style files, etc.), you usually only want to build the files containing a changed file. This plugin builds a dependency list and iterates through to find the highest-level dependent. This way, you won't have to do a full rebuild every time a file changes, but build just the files that depend on the changed file.
Of course, this package has uses other than frontend applications. You can use it to build other types of sources, or to generate the list of dependencies for your files.
ultimateGlob
Map<fileName: string, dependencies: string[]>
ultimateGlob
. Return those matches.npm install --save-dev gulp-ultimate-dependent
const gulp = require('gulp');
const ultimateDependent = require('gulp-ultimate-dependent');
const firstRun = Date.now();
const getDependencyStream = ultimateDependent({
ultimateGlob: 'src/**/*ParentPage.jsx',
extensions: ['.js'],
dependencyFile: 'dependencies.json',
warnOnMissing: true,
failOnMissing: true
});
gulp.task('incrementalBuild', () => {
return gulp.src([
'src/**/*.{js, jsx}' // all watched files
], { since: gulp.lastRun(incrementalBuild) || firstRun }) // what's changed
.pipe(getDependencyStream())
.pipe(build()) // build the ultimate dependents
.pipe(gulp.dest('output/'));
});
ultimateGlob: string
- required - search glob pattern identifying all ultimate parent dependentsextensions: string[]
- optional, default ['.js']
- used to further process matched dependency string, such as add inferred file extensionsdependencyFile: string | () => string
- optional - if you want to output the dependency list, specify a file name or function which returns a file namewarnOnMissing: bool
- optional, default false
- if true
, stream will output to console if it finds a dependency whose file is missing.failOnMissing: bool
- optional, default false
- if true
, stream will fail if it finds a dependency whose underlying file is missing (this is common if you delete a file you're watching). If false
, stream still returns affected dependents. The stream will still fail on other errors.ignoreCircularDependency: bool
- optional, default true
- if true
, stream will ignore files it's already traversed, indicating a circular dependency. If false
, stream will emit an error with the first file it sees twice.npm run test
MIT
FAQs
Gulp plugin to find the named ultimate dependent in the dependency graph.
The npm package gulp-ultimate-dependent receives a total of 2 weekly downloads. As such, gulp-ultimate-dependent popularity was classified as not popular.
We found that gulp-ultimate-dependent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.