
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@beyonk/rollup-plugin-html-esm
Advanced tools
Simple rollup plugin to generate html file and inject your output module into it. Supports ES Modules / Code-splitting. Currently html file will be placed in same directory as the output file. This plugin is inspired from rollup-plugin-generate-html.
npm install --save-dev @beyonk/rollup-plugin-html-esm
import html from '@beyonk/rollup-plugin-html-esm'
export default [{
input: 'main.js',
output: {
file: 'bundle.js',
format: 'umd'
},
plugins: [
html({
// specify template html (optional)
template: './index.html', // Default undefined
// output filename (optional)
filename: 'some.html', // Default index.html
// when specified, js src will use absolute path from publicPath (optional)
publicPath: 'dist' // Default undefined
})
]
}]
For cases when you want to generate html file per output. This should come in handy when you want to generate book example codes and such.
import glob from 'glob'
import html from '@beyonk/rollup-plugin-html-es'
const configs = glob
.sync('src/**/index.js')
.map(input => ({
input,
output: [{ file: input.replace(/^src/, 'dist'), format: 'umd' }],
plugins: [html()],
}))
export default configs
FAQs
Generates html for modular ECMAScript
The npm package @beyonk/rollup-plugin-html-esm receives a total of 2 weekly downloads. As such, @beyonk/rollup-plugin-html-esm popularity was classified as not popular.
We found that @beyonk/rollup-plugin-html-esm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.