
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@arco-design/webpack-plugin
Advanced tools
@arco-design/webpack-plugin is a webpack plugin to help deal with arco usage issues.
Style lazy load:Add babel-plugin-import to babel-loader to enable style lazy loading。If there is a babel-plugin-import for arco-design/web-react, it will be replaced。Theme import:Specify the theme package name, the plugin will read the variable content of the theme package and inject it into modifyVars of less-loader。Remove the font package that comes with the component library:Set removeFontFace to true to remove the font file that comes with the component library。Icon replacement:Specify the package name of the icon library, the plug-in will read the icon in the package and replace the icon with the same name used in the component library.。Replace default language:The default imported language pack of the component library is Chinese, which determines that Chinese will be included in the packaged product. If you don't want Chinese, you can use this parameter to replace it with the language you need.Get lazy load babel plugin configuration:The implementation of on-demand loading is achieved by injecting babel-plugin-import configuration into babel. These configurations are open for everyone to use and can be obtained through (new ArcoWebpackPlugin()).pluginForImport().getBabelPlugins().Use npm/yarn to install the plugin:
# npm
$ npm install -D @arco-design/webpack-plugin
# yarn
$ yarn add @arco-design/webpack-plugin
To to the plugin, add the following code in webpack config:
const ArcoWebpackPlugin = require('@arco-design/webpack-plugin');
// webpack config
{
plugins: [
new ArcoWebpackPlugin(options)
]
}
The plugin supports the following parameters:
| Params | Type | Default Value | Description |
|---|---|---|---|
include | {String[]} | ['src'] | File directory used by bebel-plugin-import |
extensions | {String[]} | ['js', 'jsx', 'ts', 'tsx'] | File suffix used by bebel-plugin-import |
theme | {String} | - | Theme package name |
iconBox | {String} | - | Icon library package name |
modifyVars | {Object} | {} | Less variables |
style | {String|Boolean} | true | Style import method |
removeFontFace | {Boolean} | false | Whether to remove the font file that comes with the component library |
defaultLanguage | {string} | - | Replace the default language,language list |
**Style import methods **
style: true will import less file
import '@arco-design/web-react/Affix/style'
style: 'css' will import css file
import '@arco-design/web-react/Affix/style/css'
style: false will not import any style file
FAQs
arco webpack plugin
The npm package @arco-design/webpack-plugin receives a total of 127 weekly downloads. As such, @arco-design/webpack-plugin popularity was classified as not popular.
We found that @arco-design/webpack-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.