
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
@gimloader/build
Advanced tools
This is a package that provides a preconfigured bundler to help build more complex Gimloader plugins and libraries.
To get started, run npm create @gimloader in the directory you wish to create the plugin / library in. You can also install it globally by running npm i -g @gimloader/build, which you may want for commands such as servefile.
Config is housed in the file GL.config.js in the root folder.
input: The input file that will be compiled.name: The name of the plugin / library.description: A brief description of the plugin / library.author: The author of the plugin / library.version: The version of the plugin / library.downloadUrl: The download URL for the plugin / library, used by Gimloader for updates.reloadRequired: Set to true if the plugin / library needs a reload to take effect, or set to "ingame" if it only needs a reload when in-game.plugins: An array of Esbuild plugins to useesbuildOptions: Options to pass to esbuildlibs: A list of libraries to load. These strings should look like either "[library name]" or "[library name] | [download url]".optionalLibs: The same as libs, but the plugin will still be run without these libraries.hasSettings: Set to true if the plugin has a settings menu, so the button can be shown when it is disabled.isLibrary: Set to true if you are building a library.Running npx gl build will compile the plugin / library and output it to build/[plugin name].js.
Running npx gl serve will start a local server to host the plugin / library. If the "Poll for plugins/libraries being served locally" setting is enabled on Gimloader, it will automatically detect changes to the plugin / library and reload it. By default, the plugin will be built whenever you save its files, but passing --manual will change it to only build when pressing enter in the terminal.
You can run npx gl servefile <file> to serve a single javscript file, which will automatically reload when the file is changed. Similarly to gl serve, passing --manual will change it to only update when pressing enter in the terminal.
FAQs
A package to help build complex plugins for Gimloader
The npm package @gimloader/build receives a total of 20 weekly downloads. As such, @gimloader/build popularity was classified as not popular.
We found that @gimloader/build demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.