Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@atlaspack/cli
Advanced tools
Blazing fast, zero configuration web application bundler
Atlaspack is the frontend bundler used to build Atlassian products, written in JavaScript and Rust by core contributors of Parcel. It has been engineered to bundle exceptionally large applications and serve the needs of our products. While you are welcome to try out atlaspack, we do not plan to support use-cases outside of Atlassian at this time. Therefore, we advise against using atlaspack in production environments.
[!NOTE] This repository is currently a direct fork of Parcel that will diverge over time to better handle the needs and scale required by Atlassian
Special thanks to Devon for his invaluable contributions, guidance, and wisdom in shaping the foundations of the Atlassian bundler!
npm install --save-dev @atlaspack/cli
atlaspack src/index.html
src/index.html
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<title>Atlaspack App</title>
<script type="module" src="app.js"></script>
</head>
<body>
<h1>Hello, World!</h1>
</body>
</html>
src/app.js
console.log('Hello, World!');
Check the docs website or the docs folder.
yarn test
Please see CONTRIBUTING.md for details.
Copyright (c) 2024 Atlassian US., Inc. Apache 2.0 licensed, see LICENSE file.
Prior to 096a255d54474b58b80c659274c4604ed67c9039
contributions were released
under the MIT license, see OLD_LICENSE.
FAQs
Blazing fast, zero configuration web application bundler
We found that @atlaspack/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.