Make sure the open source you're using is safe to use
gulp-yaml
v2.0.4Convert YAML to JSON
npm install gulp-yaml
We couldn't find any similar packages Browse all packages
Package Health Score
45 / 100
- Popularity Small
- Maintenance Inactive
- Security No known security issues
- Community Limited
Make sure the open source you're using is safe to usePopularity
Small
Weekly Downloads (6,425)- Dependents
- 91
- GitHub Stars
- 23
- Forks
- 7
- Contributors
- 4
The npm package gulp-yaml receives a total of 6,425 downloads a week. As such, we scored gulp-yaml popularity level to be Small.
Based on project statistics from the GitHub repository for the npm package gulp-yaml, we found that it has been starred 23 times, and that 91 other projects in the ecosystem are dependent on it.
Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.
Security
No known security issues
Security and license risk for significant versions
All VersionsDirect Vulnerabilities
0.0.3
0.1.0
0.2.4
1.0.1
2.0.4
- 0H
- 0M
- 0L
- 0H
- 0M
- 0L
- 0H
- 0M
- 0L
- 0H
- 0M
- 0L
- 0H
- 0M
- 0L
Indirect Vulnerabilities
0.0.3
0.1.0
0.2.4
1.0.1
2.0.4
License Risks
0.0.3
0.1.0
0.2.4
1.0.1
2.0.4
- 0H
- 0M
- 0L
- 0H
- 0M
- 0L
- 0H
- 0M
- 0L
- 0H
- 0M
- 0L
- 0H
- 0M
- 0L
All security vulnerabilities belong to
production dependencies of direct and indirect
packages.
We found a way for you to contribute to the project! Looks like gulp-yaml is missing a security policy.
You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.
We found a way for you to contribute to the project! Looks like gulp-yaml is missing a security policy.
# Install the Snyk CLI and test your project
npm i snyk && snyk test gulp-yaml
Maintenance
Inactive
Commit Frequency- Open Issues
- 1
- Merged PR
- 2
- Open PR
- 0
- Last Commit
- 2 years ago
Further analysis of the maintenance status of gulp-yaml based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.
An important project maintenance signal to consider for gulp-yaml is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.
In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.
Community
Limited
- Readme.md
- Yes
- Contributing.md
- No
- Code of Conduct
- No
- Contributors
- 4
- Funding
- No
This project has seen only 10 or less contributors.
We found a way for you to contribute to the project! Looks like gulp-yaml is missing a Code of Conduct.
Embed Package Health Score Badge
Package
- Node.js Compatibility
- >=6.9.5
- Age
- 7 years
- Dependencies
- 6 Direct
- Versions
- 17
- Install Size
- 12 kB
- Dist-tags
- 1
- # of Files
- 5
- Maintainers
- 1
- TS Typings
- No
gulp-yaml has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.
gulp-yaml
Install
npm install gulp-yaml --save-dev
Usage
const yaml = require('gulp-yaml');
gulp.src('./src/*.yml')
.pipe(yaml({ schema: 'DEFAULT_SAFE_SCHEMA' }))
.pipe(gulp.dest('./dist/'))
gulp.src('./src/*.yml')
.pipe(yaml({ space: 2 }))
.pipe(gulp.dest('./dist/'))
gulp.src('./src/*.yml')
.pipe(yaml({ safe: true }))
.pipe(gulp.dest('./dist/'))
API
yaml([options])
options.safe
Type: Boolean
Default: true
Enable or disable support for regexps, functions and undefined.
This flag should always be enabled when working with untrusted data.
When this flag is enabled then safeLoad method is used, otherwise load.
options.space
Type: Number or String
Default: null
Control spacing in the resulting output. It has the same usage as for JSON.stringify
options.replacer
Type: Function or Array
Default: null
Further transform the resulting output. It has the same usage as for JSON.stringify
options.schema
Type: String
Default: DEFAULT_SAFE_SCHEMA or DEFAULT_FULL_SCHEMA
Specifies what schema to use. Valid values are the same that js-yaml supports, except they are received as strings (lowercase or uppercase). See the example in the Usage section of this README. The default schema is chosen using the safe option.
options.filename
Type: String
Default: the path of the file processed
String to be used as a file path in error/warning messages.
options.ext
Type: String
Default: .json
File extension of the generated file.
options.json
Type: Boolean
Default: false
Compatibility with JSON.parse behaviour. If true, then duplicate keys in a mapping will override values rather than throwing an error.
options.onWarning
Type: Function
Default: null
Function to call on warning messages. Loader will throw on warnings if this function is not provided.
License
MIT © Cristian Trifan
gulp-yaml versions
| Version | Published | Tag | Node.js Compatability | Licenses | Dependencies | Direct Vulnerabilities | Publisher |
|---|---|---|---|---|---|---|---|
| 2.0.4 | 01 May 2019 | latest | >=6.9.5 | MIT | 6 |
| crissdev |
| 1.0.1 | 22 October 2015 | >=0.10.0 | MIT | 5 |
| crissdev | |
| 0.2.4 | 15 March 2015 | >=0.10.0 | MIT | 5 |
| crissdev | |
| All Versions | |||||||
gulp-yaml dependencies
Last updated on
23 January-2021, at 19:24 (UTC).