Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@dr.pogodin/babel-plugin-transform-assets
Advanced tools
Transforms importing of asset files at compile time using Babel
Transforms importing of asset files at compile time using Babel. This plugin removes the need to run your server code through Webpack module bundler when using loaders such as file-loader, url-loader and building isomorphic universal apps. Aids in creating a cleaner, maintainable build process at the cost of yet another Babel plugin.
This is a fork of babel-plugin-transform-assets
upgraded to be compatible with the latest Webpack's file-loder
, and to use the latest versions of all dependencies. For migration just prefix the plugin name with @dr.pogodin/
scopename in your package.json
and Babel configs.
import file from '../file.txt';
will be transformed to
var file = 'file.txt?9LDjftP';
See the spec for more examples.
Babel v6 or higher.
npm install -D @dr.pogodin/babel-plugin-transform-assets
.babelrc
.babelrc
{
"plugins": [
["@dr.pogodin/transform-assets", {
"extensions": ["svg"],
"name": "[name].[ext]?[sha512:hash:base64:7]"
}]
]
}
require('babel-core').transform('code', {
plugins: [
['@dr.pogodin/transform-assets', {
extensions: ['svg'],
name: '[name].[ext]?[sha512:hash:base64:7]',
}]
]
});
Contributions are very welcome—bug fixes, features, documentation, tests. Just make sure the tests are passing.
FAQs
Transforms importing of asset files at compile time using Babel
We found that @dr.pogodin/babel-plugin-transform-assets demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.