
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@fforres/webpack-plugin-dx
Advanced tools
[](https://github.com/fforres/webpack-plugin-dx-metrics/actions?query=workflow%3Atest) [;
module.exports = {
{...}
plugins: [
new UXWebpackPlugin({
datadogConfig: {
/* DATADOG API KEY FROM https://<YOUR_ORG>.datadoghq.com/account/settings#api */,
apiKey: 'random_key_string',
/* The name of the current project, will be added to datadog as the `projectName` tag */
projectName: 'some_cool_project_name'
},
}),
],
};
Options are defined by DXWebpackPluginProps
Object Key | Required | Default Value | Description |
---|---|---|---|
projectName | yes | Datadog's project name, will be added to each track call as projectName tag | |
datadogConfig | no | {"prefix":"ux.webpack.","flushIntervalSeconds":2} | Config object for Datadog Metrics - Typescript Type here |
enabledKeysToTrack | no | ['recompile','recompile_session','compile','compile_session'] | An array of keys that will define what "keys" will be tracked. By Default we track all the keys |
tags | no | {} | Extra tags to be added to Datadog Metrics - An object shape of { tagName: "tagValue", environment: "production" } |
dryRun | no | false | If true , will not send tracking events to datadog. |
{
projectName: string;
datadogConfig?: BufferedMetricsLoggerOptions;
enabledKeysToTrack?: TrackingMetricKeys[];
tags?: { [key: string]: string };
dryRun?: boolean;
}
git clone
yarn
yarn dev
to run a super-simple webpack-dev-server with the plugin debug
enabledyarn debug
to run webpack with node --inspect-brk
flag, and be able to debug using the NIM - Node Inspector Manager chrome extensionTo deploy, create a PR and bump the the version in package.json
. Once the PR
is merged it will deploy a new version of the package.
Metric | Tracking key | Description | How are we tracking |
---|---|---|---|
compilation | compile | Tracks only the time an application takes to compile the code. Regarding wepback hooks tracks from "beforeCompile" to "compilation" | histogram |
compilationSession | compile_session | Tracks the time from when a webpack process starts, until it finishes. Regarding wepback hooks tracks from "environment" to "done" | histogram & increment |
recompilation | recompile | Tracks "only" the time an application takes to re-compile the code. (After the initial compilation). Regarding wepback hooks tracks from "beforeCompile" to "compilation" | histogram |
recompilationSession | recompile_session | Tracks the time when a webpack recompilation starts, until it finishes. Regarding wepback hooks, it tracks from "watchRun" to "done" | histogram & increment |
memoryTracking | no | { enabled: true, lapseTimeInMilliseconds: 2000 } | By default this will track memory usage of this process on every lapseTimeInMilliseconds |
{
projectName: string;
datadogConfig?: BufferedMetricsLoggerOptions;
enabledKeysToTrack?: TrackingMetricKeys[];
tags?: { [key: string]: string };
dryRun?: boolean;
memoryTracking: { enabled: true, lapseTimeInMilliseconds: 2000 }
}
git clone
yarn
yarn dev
to run a super-simple webpack-dev-server with the plugin debug
enabledyarn debug
to run webpack with node --inspect-brk
flag, and be able to debug using the NIM - Node Inspector Manager chrome extensionTo deploy, create a PR and bump the the version in package.json
. Once the PR
is merged it will deploy a new version of the package.
Metric | Tracking key | Description | How are we tracking |
---|---|---|---|
compilationSession | compile_session | Tracks the time from when a "compilation" process starts, until it finishes. | histogram & increment |
recompilationSession | recompile_session | Tracks the time when module recompilation starts, until it finishes. | histogram & increment |
FAQs
[](https://github.com/fforres/webpack-plugin-dx-metrics/actions?query=workflow%3Atest) [![npm version](https://badge.fury.io/js/%40fforres%2Fwebpack-plugin-
We found that @fforres/webpack-plugin-dx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.