
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
@eik/esbuild-plugin
Advanced tools
esbuild plugin for loading import maps from a Eik server and applying the mapping to ECMAScript modules in preparation for upload to the same server.
esbuild plugin for build-time import mapping with Eik.
npm install --save-dev esbuild @eik/esbuild-plugin
import * as eik from "@eik/esbuild-plugin";
import esbuild from "esbuild";
const options = /** @type {esbuild.BuildOptions}*/ ({
entryPoints: ["./src/index.js"],
outdir: "./public",
format: "esm",
platform: "browser",
target: ["es2017"],
bundle: true,
sourcemap: true,
});
const watch = process.argv.includes("--dev");
if (watch) {
let ctx = await esbuild.context(options);
await ctx.watch();
console.log("[esbuild] watching...");
} else {
// Use the Eik plugin to to import mapping for the production build
// Load the import maps listed in eik.json from the Eik server
await eik.load();
await esbuild.build({
...options,
plugins: [eik.plugin()],
});
}
This module has the following API:
Loads an Eik configuration or import maps directly for the plugn to use to apply.
| option | default | type | required | details |
|---|---|---|---|---|
| path | cwd/eik.json | string | false | Path to eik.json file. |
| urls | [] | array | false | Array of import map URLs to fetch from. |
| maps | [] | array | false | Array of import map as objects. |
The plugin will attempt to read a eik.json from the current working directory of the Node.js process.
await eik.load();
The path to the location of an eik.json file can be specified with the path option.
await eik.load({
path: "/path/to/eik.json",
});
The plugin can also load import maps directly from one or multiple URLs using the urls option.
await eik.load({
urls: ["http://myserver/import-maps/map.json"],
});
Additionally, individual import maps can be specified using the maps option.
await eik.load({
maps: [
{
imports: {
"lit-element": "https://cdn.eik.dev/lit-element/v2",
},
},
],
});
If several of these options are used, maps takes precedence over urls which takes precedence over values loaded from an eik.json file.
ie. in the following example
await eik.load({
path: "/path/to/eik.json",
urls: ["http://myserver/import-maps/map.json"],
maps: [
{
imports: {
"lit-element": "https://cdn.eik.dev/lit-element/v2",
},
},
],
});
Any import map URLs in eik.json will be loaded first, then merged with (and overridden if necessary by) the result of fetching from http://myserver/import-map before finally being merged with (and overriden if necessary by) specific mappings defined in maps. (In this case lit-element)
Returns the plugin which will apply the loaded import maps during build. The returned plugin should be appended to the esbuild plugin array.
import * as eik from "@eik/esbuild-plugin";
import esbuild from "esbuild";
await eik.load();
esbuild
.build({
entryPoints: ["src/main.js"],
bundle: true,
format: "esm",
minify: false,
sourcemap: false,
target: ["es2017"],
plugins: [eik.plugin()],
outfile: "out.js",
})
.catch(() => process.exit(1));
Clears the loaded import maps from the plugins internal cache.
FAQs
esbuild plugin for loading import maps from a Eik server and applying the mapping to ECMAScript modules in preparation for upload to the same server.
The npm package @eik/esbuild-plugin receives a total of 394 weekly downloads. As such, @eik/esbuild-plugin popularity was classified as not popular.
We found that @eik/esbuild-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.