
Research
/Security News
60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
node-sass-imports
Advanced tools
A simple script you can add to any task runner to determine what files are imported by a given sass file. Especially useful for watch tasks in grunt/gulp.
node-sass-imports is a simple script that finds what files are being imported by a given file in Sass. This is especially useful for watch tasks so you don't have to manually list what files to watch for changes. Instead, using this plugin, you pass in your main file to a watch task and all of your imports are watched automatically.
npm install node-sass-imports
Using this plugin in a gulp watch task.
gulp.task('watch', function () {
var sassimports = require('node-sass-imports');
gulp.watch(sassimports(scss_filename), ['scss_task']);
});
This project will of course need to have options in the future that may be necessary for sass imports, like using the indented syntax. I would also like to add some functionality that allows for the original list of files to be updated without having to restart the watch task. This project will also need to have some tests implemented for the different sass syntaxes and task runners.
FAQs
A simple script you can add to any task runner to determine what files are imported by a given sass file. Especially useful for watch tasks in grunt/gulp.
We found that node-sass-imports demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.