Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@10up/babel-preset-default
Advanced tools
Babel preset for transforming JavaScript at 10up.
npm install --save-dev @10up/babel-preset-default
Simply add @10up/babel-preset-default
to your .babelrc
file
// .babelrc
{
"presets": [ "@10up/babel-preset-default"]
}
This babel preset exposes a few options. The default options are listed below.
// .babelrc
{
"presets": [
["@10up/babel-preset-default", {
"modules": "auto",
// defaults to true if modules is false and false otherwise.
"runtimeESModules": false,
"wordpress": false,
"debug": false,
"removePropTypes": {},
"targets": [
"> 1%",
"ie >= 11",
"last 2 versions",
"Firefox ESR"
]
}]
]
}
It's the @babel/preset-env
modules setting. Default's to auto
which will detect whether the "caller" (e.g webpack) has ES6 modules support and if so, will disable module transpilation (this is the desired behavior for tree-shaking for example);
When enabled will load @wordpress/babel-preset-default
. Required when building WordPress Gutenberg blocks.
Enables debug messages. Usefull to review which presets and plugins babel is using.
By default this babel preset will remove any prop-types declarations when building for production.
You rarelly will need to change this setting, but in case you do, this option let's you specify any of the babel-plugin-transform-react-remove-prop-types options.
Let's you specify which browser's are support. Set this option to {}
if you want to leverage browserlist config sources (.browserslistrc
). By default, the following browsers will be supported.
[
"> 1%",
"ie >= 11",
"last 2 versions",
"Firefox ESR"
]
The appropriate core-js
polyfills will be added automatically for those browsers.
You can set this flag to enable or disable development mode, however, this preset will automatically detect that based on how it was loaded by the caller (e.g webpack).
Active: 10up is actively working on this, and we expect to continue work for the foreseeable future. Bug reports, feature requests, questions, and pull requests are welcome.
FAQs
10up's default babel preset
The npm package @10up/babel-preset-default receives a total of 6,506 weekly downloads. As such, @10up/babel-preset-default popularity was classified as popular.
We found that @10up/babel-preset-default demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.