Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@citycide/babel-standalone
Advanced tools
A smaller customized version of
@babel/standalone
.
The official @babel/standalone
has grown very large in recent releases,
at almost 6 MB minified. For use cases like param.macro
's
online playground where only a subset of transforms is
needed, that size isn't ideal. @citycide/babel-standalone
is reduced to
about 1.73 MB minified.
This project is based on the effort by @joncasey
on my-babel-standalone
.
You can use the minified source directly on a page using unpkg:
<script src="https://unpkg.com/@citycide/babel-standalone"></script>
or by installing locally (i.e. for bundling):
# using yarn
yarn add @citycide/babel-standalone
# using npm
npm i @citycide/babel-standalone
git clone https://github.com/citycide/babel-standalone.git
cd babel-standalone
yarn
or npm install
yarn build
or npm run build
Any plugins needed in the final bundle should be added as dependencies, where
the update script will pull them from automatically. This update script is run
before every build or can be manually run with yarn update
or npm run update
.
The version of the package itself is tied to the version of @babel/preset-env
used, so both can and should be updated by editing only the @babel/preset-env
version in package.json
. Running yarn update
will then fetch the new version
and make this package's version match it.
param.macro
– a babel macro for compile-time partial application in JavaScript@babel/standalone
– the official standalone Babel packagemy-babel-standalone
– another minimal version by @joncaseyMIT © Bo Lingen / citycide
Based on code also under MIT © @joncasey
FAQs
A smaller customized version of @babel/standalone.
The npm package @citycide/babel-standalone receives a total of 2 weekly downloads. As such, @citycide/babel-standalone popularity was classified as not popular.
We found that @citycide/babel-standalone demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.