
Security News
NVD Concedes Inability to Keep Pace with Surging CVE Disclosures in 2025
Security experts warn that recent classification changes obscure the true scope of the NVD backlog as CVE volume hits all-time highs.
Velvet is a modular, fast, static-site generator that looks a lot like Jekyll and can be easily incorporated into Gulp-based workflows.
Velvet is a modular, fast, static-site generator that looks a lot like Jekyll and can be easily incorporated into Gulp-based workflows. Unlike Jekyll, it is written in Node.js and is very very fast when used with Gulp.
The best way to use Velvet is via the slush generator.
You can find that here.
This module bundles up several custom utilities that take a config object and return a special nunjucks environment. While the slush generator provides several, fairly comprehensive Gulp tasks to turn that into somethere, there would be nothing preventing alternate uses with different build systems, or completely different workflows.
Essentially, this module is providing a filesystem decorator, that gives you access to a slew of functions and utilities in your nunjucks templates, the goal of which was to replicate Jekyll functionality, along with some features I found absolutely necessary. These include basic asset management, and an awareness of file "flavors" like scripts, styles and images.
site
- the core object. Contains all the data about your site, files and
templates. Supports most of the patterns in use by Jekyll (so much so, I
will point you to their docs until I've completed some).
custom tags - Including helpers for images, scripts, styles and files, which
interact with the site object to keep track of needed assets, and options
for those assets, e.g. {{ 'favicon.png' | image_url({resize: [50]}) }}
would print the resized image url into the template, and would mark the
necessary information on the site
object for Gulp to process this image
during the build process.
FAQs
Velvet is a modular, fast, static-site generator that looks a lot like Jekyll and can be easily incorporated into Gulp-based workflows.
We found that velvet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Security experts warn that recent classification changes obscure the true scope of the NVD backlog as CVE volume hits all-time highs.
Security Fundamentals
Attackers use obfuscation to hide malware in open source packages. Learn how to spot these techniques across npm, PyPI, Maven, and more.
Security News
Join Socket for exclusive networking events, rooftop gatherings, and one-on-one meetings during BSidesSF and RSA 2025 in San Francisco.