gulp-util
Utility functions for gulp plugins
gulp-util@3.0.8 was published on 2016-12-26. Its manifest declares 18 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.10.
Deprecated: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
All gulp-util versions · Permanent reference to 3.0.8
Package specifications
| Version | 3.0.8 |
|---|---|
| License declaration | MIT |
| Published | 2016-12-26T23:11:10.645Z |
| Node.js requirement | >=0.10 |
| Type declarations | Not declared |
| Runtime dependency count | 18 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | Not supplied |
| Published file count | Not supplied |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | Not declared |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 58 |
| Repository stars | 822 |
| Repository forks | 99 |
Install gulp-util 3.0.8
npm install gulp-util@3.0.8 pnpm add gulp-util@3.0.8 yarn add gulp-util@3.0.8
Runtime dependencies
- array-differ ^1.0.0
- array-uniq ^1.0.2
- beeper ^1.0.0
- chalk ^1.0.0
- dateformat ^2.0.0
- fancy-log ^1.1.0
- gulplog ^1.0.0
- has-gulplog ^0.1.0
- lodash._reescape ^3.0.0
- lodash._reevaluate ^3.0.0
- lodash._reinterpolate ^3.0.0
- lodash.template ^3.0.0
- minimist ^1.1.0
- multipipe ^0.1.2
- object-assign ^3.0.0
- replace-ext 0.0.1
- through2 ^2.0.0
- vinyl ^0.5.0
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- ansi-gray@0.1.1 — indirect
- ansi-regex@2.1.1 — indirect
- ansi-styles@2.2.1 — indirect
- ansi-wrap@0.1.0 — indirect
- array-differ@1.0.0 — direct
- array-uniq@1.0.3 — direct
- beeper@1.1.1 — direct
- chalk@1.1.3 — direct
- clone@1.0.4 — indirect
- clone-stats@0.0.1 — indirect
- color-support@1.1.3 — indirect
- core-util-is@1.0.3 — indirect
- dateformat@2.2.0 — direct
- duplexer2@0.0.2 — indirect
- escape-string-regexp@1.0.5 — indirect
- fancy-log@1.3.3 — direct
- glogg@1.0.2 — indirect
- gulplog@1.0.0 — direct
- has-ansi@2.0.0 — indirect
- has-gulplog@0.1.0 — direct
- inherits@2.0.4 — indirect
- isarray@0.0.1 — indirect
- isarray@1.0.0 — indirect
- lodash._basecopy@3.0.1 — indirect
- lodash._basetostring@3.0.1 — indirect
- lodash._basevalues@3.0.0 — indirect
- lodash._getnative@3.9.1 — indirect
- lodash._isiterateecall@3.0.9 — indirect
- lodash._reescape@3.0.0 — direct
- lodash._reevaluate@3.0.0 — direct
- lodash._reinterpolate@3.0.0 — direct
- lodash._root@3.0.1 — indirect
- lodash.escape@3.2.0 — indirect
- lodash.isarguments@3.1.0 — indirect
- lodash.isarray@3.0.4 — indirect
- lodash.keys@3.1.2 — indirect
- lodash.restparam@3.6.1 — indirect
- lodash.template@3.6.2 — direct
- lodash.templatesettings@3.1.1 — indirect
- minimist@1.2.8 — direct
- multipipe@0.1.2 — direct
- object-assign@3.0.0 — direct
- parse-node-version@1.0.1 — indirect
- process-nextick-args@2.0.1 — indirect
- readable-stream@1.1.14 — indirect
- readable-stream@2.3.8 — indirect
- replace-ext@0.0.1 — direct
- safe-buffer@5.1.2 — indirect
- sparkles@1.0.1 — indirect
- string_decoder@0.10.31 — indirect
- string_decoder@1.1.1 — indirect
- strip-ansi@3.0.1 — indirect
- supports-color@2.0.0 — indirect
- through2@2.0.5 — direct
- time-stamp@1.1.0 — indirect
- util-deprecate@1.0.2 — indirect
- vinyl@0.5.3 — direct
- xtend@4.0.2 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
OpenSSF repository checks
Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.
| Code-Review | 3/10 — Found 10/28 approved changesets -- score normalized to 3 |
|---|---|
| Maintained | 0/10 — project is archived |
| Binary-Artifacts | 10/10 — no binaries found in the repo |
| Security-Policy | 10/10 — security policy file detected |
| CII-Best-Practices | 0/10 — no effort to earn an OpenSSF best practices badge detected |
| License | 10/10 — license file detected |
| Fuzzing | 0/10 — project is not fuzzed |
| Branch-Protection | 0/10 — branch protection not enabled on development/release branches |
| SAST | 0/10 — SAST tool is not run on all commits -- score normalized to 0 |
Evidence and freshness
- https://registry.npmjs.org/gulp-util/3.0.8 — retrieved 2026-10-29T10:50:35.931Z
- https://api.deps.dev/v3/systems/npm/packages/gulp-util/versions/3.0.8 — retrieved 2026-10-29T10:50:36.452Z
- https://api.deps.dev/v3/systems/npm/packages/gulp-util/versions/3.0.8:dependencies — retrieved 2026-10-29T10:50:36.489Z
- https://api.deps.dev/v3/projects/github.com%2Fgulpjs%2Fgulp-util — retrieved 2026-10-29T10:50:36.606Z