
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
6to5 browserify plugin
$ npm install --save-dev 6to5ify
$ browserify script.js -t 6to5ify --outfile bundle.js
var fs = require("fs");
var browserify = require("browserify");
var to5ify = require("6to5ify");
browserify({ debug: true })
.transform(to5ify)
.require("./script.js", { entry: true })
.bundle()
.on("error", function (err) { console.log("Error : " + err.message); })
.pipe(fs.createWriteStream("bundle.js"));
browserify().transform(to5ify.configure({
blacklist: ["generators"]
}))
$ browserify -d -e script.js -t [ 6to5ify --blacklist generators ]
By default 6to5's experimental transforms
are disabled. You can turn them on by passing experimental as a configuration option.
browserify().transform(to5ify.configure({
experimental: true
}))
$ browserify -d -e script.js -t [ 6to5ify --experimental ]
By default all files with the extensions .js, .es, '.es6 and .jsx are compiled.
You can change this by passing an array of extensions.
NOTE: This will override the default ones so if you want to use any of them you have to add them back.
browserify().transform(to5ify.configure({
extensions: [".6to5"]
}))
$ browserify -d -e script.js -t [ 6to5ify --extensions .6to5 ]
Browserify passes an absolute path so there's no way to determine what folder
it's relative to. You can pass a relative path that'll be removed from the
absolute path with the sourceMapRelative option.
browserify().transform(to5ify.configure({
sourceMapRelative: "/Users/sebastian/Projects/my-cool-website/assets"
}))
$ browserify -d -e script.js -t [ 6to5ify --sourceMapRelative . ]
browserify().transform(to5ify.configure({
// Optional ignore regex - if any filenames **do** match this regex then they
// aren't compiled
ignore: /regex/,
// Optional only regex - if any filenames **don't** match this regex then they
// aren't compiled
only: /my_es6_folder/
}))
$ browserify -d -e script.js -t [ 6to5ify --ignore regex --only my_es6_folder ]
As a convenience, the 6to5 polyfill is exposed in 6to5ify. If you've got a browserify-only package this may alleviate the necessity to have both 6to5 & 6to5ify installed.
// In browser code
require("6to5ify/polyfill");
FAQs
6to5 browserify plugin
The npm package 6to5ify receives a total of 149 weekly downloads. As such, 6to5ify popularity was classified as not popular.
We found that 6to5ify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.