
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@bbc/webpack-s3-uploader
Advanced tools
Webpack plugin to push assets to s3
There are already a number of webpack plugins out in the wild that can push assets to S3, so you might be wondering why we rolled out our own. In very simple terms, we had issues with all the other ones and the effort involved in just creating our own highly outweighed the effort we were putting into debugging the existing ones.
In webpack.config.js
:
const WebpackS3Uploader = require('@bbc/webpack-s3-uploader');
{
...
plugins: [
new WebpackS3Uploader({
whitelist: ['js', 'css'],
logger: console,
basePath: 'webpack/assets',
directory: './web/assets',
s3Options: {
region: 'eu-west-1',
httpOptions: {
timeout: 240000,
connectTimeout: 240000
}
},
s3UploadOptions: {
ACL: 'public-read',
CacheControl: 'public, max-age=15552000, immutable',
}
})
]
}
whitelist
: [Required] An array of extensions to include in the upload. For example - ['js', 'css']directory
: [Required] Provide a directory to uploads3Options
: Provide options for S3 object s3Configs3UploadOptions
: Provide upload options putObjectlogger
: A logger object that supports the standard .info, .log, .error, etc APIbasePath
: Provide the namespace where upload files on S3yarn test
- Run test suiteyarn test:coverage
- Run test suite with code coverageyarn build
- Run buildyarn lint
- Runs linting over src/
and test/
FAQs
Webpack plugin to push assets to s3
We found that @bbc/webpack-s3-uploader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 321 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.