Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
6to5-loader
Advanced tools
Turn ES6 code into vanilla ES5 with no runtime required using 6to5;
Notes: Issues with the output should be reported on the 6to5 issue tracker;
$ npm install --save-dev 6to5-loader
import Animal from '6to5!./Animal.js';
class Person extends Animal {
constructor(arg='default') {
this.eat = 'Happy Meal';
}
}
export default Person;
var Person = require('6to5!./Person.js').default;
new Person();
Or within the webpack config:
module: {
loaders: [
{ test: /\.js$/, exclude: /node_modules/, loader: '6to5-loader'}
]
}
and then import normally:
import Person from './Person.js';
Make sure you are transforming as few files as possible. Because you are probably
matching /\.js$/
, you might be transforming the node_modules
folder or other unwanted
source. See the exclude
option in the loaders
config as documented above.
6to5 uses a very small runtime for common functions such as _extend
. By default
this will be added to every file that requires it.
You can instead require the 6to5 runtime as a separate module to avoid the duplication.
The following configuration disables automatic per-file runtime injection in 6to5, instead
bundling requiring 6to5-runtime
and making all helpers use it.
NOTE: You must run npm install 6to5-runtime --save
to include this in your project.
loaders: [
// runtime=true tells 6to5 to expect a runtime, but we still need to bundle it.
{test: /\.jsx?$/, exclude: /node_modules/, loader: '6to5-loader?experimental&optional=selfContained'}
]
This can save significant overhead if you use 6to5 in many modules.
See the 6to5
options
MIT © Luis Couto
FAQs
6t05 module loader for webpack
The npm package 6to5-loader receives a total of 7 weekly downloads. As such, 6to5-loader popularity was classified as not popular.
We found that 6to5-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.