
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Gulpit is an easy and fast configurable task library built around Gulp useable with a CLI
Gulpit is an easy and fast configurable task library built around Gulp useable with a CLI. You just have to configure the 'gulpit-conf.js' file (< 2min). You will find a sample below.
npm install --global gulpit
cd
where the 'gulpit-conf.js' is then run: gulpit
You have two main command when you are in the gulpit app:
Build
: will build your files oncewatch
: will watch for file modifications then build after each new savehelp
: List the command available with descriptionsYou have extra options like:
build --css
: will only build cssbuild --prod
: will build with the prod profile*You can combine:
build --js --prod
: will only build js with the prod profile*
*Prod profile: will override the default options.
For Javascript:
For CSS:
Here is an example of a specific config if you use browserify (with sourcemaps) and sass (with sourcemaps and autoprefixer):
module.exports = {
projectName: 'test-project',
profiles: {
default: {
js: {
sourceFolder: 'dev/js/browserify/index.js',
exitFolder: 'build/js/',
exitFileName: 'app.js',
tasks: {
browserify: { activate: true },
sourcemaps: { activate: true }
}
},
css: {
sourceFolder: 'dev/css/sass/index.scss',
exitFolder: 'build/css/',
exitFileName: 'style.css',
tasks: {
sass: {
activate: true,
options: {
outputStyle: 'nested'
}
},
autoprefixer: {
activate: true,
options: {
browsers: ['last 2 versions']
}
},
sourcemaps: { activate: true }
}
}
},
// Optional prod profile to disable sourcemaps
// when you use '--prod' argument in the CLI
prod: {
js: { sourcemaps: { activate: false } },
css: { sourcemaps: { activate: false } }
}
}
};
You can find the complete sample conf with all the tasks available in the test folder of this repo.
The different options for sass.options.outputStyle are: nested, expanded, compact, compressed
If you use both Browserify and Uglify, the uglify.options.concat options will be ignored as browserify already concat all the files
File will be renamed after build only if you indicate a specific file for sourceFolder
You can the use prod profile by setting your NODE_ENV to "prod" instead of using the --prod
option.
FAQs
Gulpit is an easy and fast configurable task library built around Gulp useable with a CLI
The npm package gulpit receives a total of 0 weekly downloads. As such, gulpit popularity was classified as not popular.
We found that gulpit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.