
Security News
Scaling Socket from Zero to 10,000+ Organizations
Socket CEO Feross Aboukhadijeh shares lessons from scaling a developer security startup to 10,000+ organizations in this founder interview.
@enonic/tsup-plugin-manifest
Advanced tools
npm install --save-dev @enonic/tsup-plugin-manifest
yarn add --dev @enonic/tsup-plugin-manifest
pnpm add --save-dev @enonic/tsup-plugin-manifest
import TsupPluginManifest from '@enonic/tsup-plugin-manifest';
export default defineConfig((options) => {
return {
// ...
esbuildPlugins: [
TsupPluginManifest({
// Manipulate the manifest keys and values.
generate: (entries) => {
const newEntries = {} as typeof entries;
Object.entries(entries).forEach(([k,v]) => {
// console.log(k,v);
const ext = v.split('.').pop() as string;
const parts = k.replace(`${SOME_DIR}/`, '').split('.');
parts.pop();
parts.push(ext);
newEntries[parts.join('.')] = v.replace(`${SOME_DIR}/`, '');
});
return newEntries;
}
})
],
format: [
'cjs', // Legacy browser support, also css in manifest.cjs.json
'esm', // cjs needed because css files are not reported in manifest.esm.json
],
// ...
}
}
git tag vX.Y.Z
git push origin vX.Y.Z
This will trigger release & publish on NPM.
options?.generateType: (entries: Record<string,string>) => Record<string,string>
Callback used to manipulate the content of the produced manifest file.
MIT
FAQs
Plugin for tsup to generate a manifest.json per format
We found that @enonic/tsup-plugin-manifest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh shares lessons from scaling a developer security startup to 10,000+ organizations in this founder interview.

Research
Socket Threat Research maps a rare inside look at OtterCookie’s npm-Vercel-GitHub chain, adding 197 malicious packages and evidence of North Korean operators.

Research
Socket researchers identified a malicious Chrome extension that manipulates Raydium swaps to inject an undisclosed SOL transfer, quietly routing fees to an attacker wallet.