
Product
Reachability for Ruby Now in Beta
Reachability analysis for Ruby is now in beta, helping teams identify which vulnerabilities are truly exploitable in their applications.
@bbc/webpack-s3-uploader
Advanced tools
Webpack plugin to push assets to s3
There are already a number of webpack plugins out in the wild that can push assets to S3, so you might be wondering why we rolled out our own. In very simple terms, we had issues with all the other ones and the effort involved in just creating our own highly outweighed the effort we were putting into debugging the existing ones.
In webpack.config.js:
const WebpackS3Uploader = require('@bbc/webpack-s3-uploader');
{
...
plugins: [
new WebpackS3Uploader({
whitelist: ['js', 'css'],
logger: console,
basePath: 'webpack/assets',
directory: './web/assets',
s3Options: {
region: 'eu-west-1',
httpOptions: {
timeout: 240000,
connectTimeout: 240000
}
},
s3UploadOptions: {
ACL: 'public-read',
CacheControl: 'public, max-age=15552000, immutable',
}
})
]
}
whitelist: [Required] An array of extensions to include in the upload. For example - ['js', 'css']directory: [Required] Provide a directory to uploads3Options: Provide options for S3 object s3Configs3UploadOptions: Provide upload options putObjectlogger: A logger object that supports the standard .info, .log, .error, etc APIbasePath: Provide the namespace where upload files on S3yarn test - Run test suiteyarn test:coverage - Run test suite with code coverageyarn build - Run buildyarn lint - Runs linting over src/ and test/FAQs
Webpack plugin to push assets to s3
We found that @bbc/webpack-s3-uploader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 321 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Reachability analysis for Ruby is now in beta, helping teams identify which vulnerabilities are truly exploitable in their applications.

Research
/Security News
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.