
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
node-sass-imports
Advanced tools
A simple script you can add to any task runner to determine what files are imported by a given sass file. Especially useful for watch tasks in grunt/gulp.
node-sass-imports is a simple script that finds what files are being imported by a given file in Sass. This is especially useful for watch tasks so you don't have to manually list what files to watch for changes. Instead, using this plugin, you pass in your main file to a watch task and all of your imports are watched automatically.
npm install node-sass-imports
Using this plugin in a gulp watch task.
gulp.task('watch', function () {
var sassimports = require('node-sass-imports');
gulp.watch(sassimports(scss_filename), ['scss_task']);
});
This project will of course need to have options in the future that may be necessary for sass imports, like using the indented syntax. I would also like to add some functionality that allows for the original list of files to be updated without having to restart the watch task. This project will also need to have some tests implemented for the different sass syntaxes and task runners.
FAQs
A simple script you can add to any task runner to determine what files are imported by a given sass file. Especially useful for watch tasks in grunt/gulp.
The npm package node-sass-imports receives a total of 0 weekly downloads. As such, node-sass-imports popularity was classified as not popular.
We found that node-sass-imports demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.