Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@codemod-utils/blueprints
Advanced tools
Utilities for blueprints
Are there files that you always need, in order to create or update projects? @codemod-utils/blueprints
helps you define these files and provide user-specific data (context).
Need to add or update a dependency? You can use decideVersion
to know which version to install.
It is assumed that:
latest-version
. (The reasons are, your codemod would have an extra dependency and your tests may fail without stubs—more dependencies.)decideVersion
, the codemod has computed dependencies
(current dependencies of the user's project) and stored latestVersions
(versions to install by default) somewhere.Step 1. Pass latestVersions
to decideVersion
.
import { decideVersion } from '@codemod-utils/blueprints';
// Hardcode the versions
const latestVersions = new Map([
['embroider-css-modules', '0.1.2'],
['webpack', '5.82.0'],
]);
// Create a wrapper
export function getVersion(packageName, options) {
const { dependencies } = options;
return decideVersion(packageName, {
dependencies,
latestVersions,
});
}
Step 2. Pass dependencies
to decideVersion
.
// `dependencies` obtained from the user's `package.json`
const options = {
dependencies: new Map([
['webpack', '^5.79.0'],
]),
};
// Query version
getVersion('embroider-css-modules', options); // '^0.1.2'
getVersion('webpack', options); // '^5.79.0' (no-op)
When a user runs your codemod with npx
, where are your blueprint files installed? With getFilePath
, you don't need to worry about the actual location.
Step 1. Pass import.meta.url
to getFilePath
. Append the relative path to your blueprints folder.
import { join } from 'node:path';
import { getFilePath } from '@codemod-utils/blueprints';
const fileURL = import.meta.url;
// Create a wrapper
export const blueprintsRoot = join(getFilePath(fileURL), '../../blueprints');
Step 2. Prepend the file path with blueprintsRoot
.
import { readFileSync } from 'node:fs';
import { join } from 'node:path';
// Read file
const blueprintFilePath = '__addonLocation__/rollup.config.mjs';
const blueprintFile = readFileSync(
join(blueprintsRoot, blueprintFilePath),
'utf8',
);
Often, blueprints need context: When a condition is true, a file should be generated in a different way. You can embed logic with delimiters in the blueprint files, then use processTemplate
to pass data.
There are 3 types of delimiters:
<%- %>
) - escape an HTML code<% %>
) - evaluate a JavaScript code<%= %>
) - substitute a valueStep 1. Indicate how the file should be created.
/* blueprints/__addonLocation__/rollup.config.mjs */
<% if (options.packages.addon.hasTypeScript) { %>import typescript from 'rollup-plugin-ts';<% } else { %>import { babel } from '@rollup/plugin-babel';<% } %>
import copy from 'rollup-plugin-copy';
import { Addon } from '@embroider/addon-dev/rollup';
const addon = new Addon({
srcDir: 'src',
destDir: 'dist',
});
export default {
output: addon.output(),
plugins: [
addon.publicEntrypoints([<%= context.addon.publicEntrypoints.map((filePath) => `'${filePath}'`).join(', ') %>]),
addon.appReexports([<%= context.addon.appReexports.map((filePath) => `'${filePath}'`).join(', ') %>]),
addon.dependencies(),
// ...
],
};
Step 2. Pass data to the file.
import { readFileSync } from 'node:fs';
import { join } from 'node:path';
import { processTemplate } from '@codemod-utils/blueprints';
// Read file
const blueprintFilePath = '__addonLocation__/rollup.config.mjs';
const blueprintFile = readFileSync(
join(blueprintsRoot, blueprintFilePath),
'utf8',
);
// Process file
processTemplate(blueprintFile, {
context, // context = { addon: ... }
options, // options = { packages: ... }
});
Often, it is easy to miscalculate data and misplace the newline character \n
. If you intend to publish your codemod, I recommend using @codemod-utils/tests
(create and test file fixtures) to check the output and prevent regressions.
See the Contributing guide for details.
This project is licensed under the MIT License.
FAQs
Utilities for blueprints
The npm package @codemod-utils/blueprints receives a total of 29 weekly downloads. As such, @codemod-utils/blueprints popularity was classified as not popular.
We found that @codemod-utils/blueprints demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.