
Security News
The Code You Didn't Write Is Still Yours to Defend
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.
@gridonic/webpack
Advanced tools
Our pre-configured webpack. Nothing more, nothing less.
⚠️ It’s highly recommended to use our @gridonic/cli since it can scaffold your project and works seamlessly with our webpack.
If you need to set up your project manually, those steps will get you up and running:
npm install --save-dev @gridonic/webpack
This will install our npm package.
touch webpack.config.js
This creates a webpack.config.js file and a very simple configuration could look like this:
const { extendConfig } = require('@gridonic/webpack');
module.exports = extendConfig
.forDevelopment({ /* Options for development only */ })
.forProduction({ /* Options for production only */ })
.forAll({ /* Options for all environments */ })
.toConfig;
Add npm scripts to your package.json. This is optional if you have our CLI installed globally.
{
"scripts": {
"dev": "webpack-dev-server --hot",
"build": "webpack --mode=production"
}
}
Finally you…
npm run dev if you want to develop on your project, ornpm run build if you want to ship your code.Simple, right? Without any adjustments our pre-configured webpack runs with …
This package provides commands and flags for our @gridonic/cli.
Our webpack setup should be flexible and simple to use at the same time. That’s why we have configurable presets for tasks that come up frequently but are not included in the default core configuration.
| Preset | Description |
|---|---|
file | Use this if you need to add files in general (e.g. video in html). |
raw | Use this if you need to import files as strings. |
vue | Use this if you are going to develop a Vue.js application. |
Let’s say you need to import .csv files for example. In that case you’ll need to add the raw preset and adjust the test RegEx.
// webpack.config.js
const { extendConfig } = require('@gridonic/webpack');
module.exports = extendConfig
.usePreset('raw', { test: /\.csv$/ })
.toConfig;
That’s it. You now can import your .csv files as strings.
import TopTenCommits from './TopTenCommits.csv';
console.log(TopTenCommits);
Setting up the build environment for a Vue.js application is straight forward if you use our @gridonic/generator and @gridonic/cli. If you want to do it manually you will still have a pain free life.
// webpack.config.js
const { extendConfig } = require('@gridonic/webpack');
module.exports = extendConfig
.usePreset('vue')
.toConfig;
Looking for third party configuration files like Babel, ESLint or PostCSS? Feel free to use what ever you may like.
Add the https preset to your configuration. By default, the config expects a .ca, .crt and .key file in the folder /usr/local/etc/httpd/ssl/,
to match the ssl information you use for your apache server.
If you store your ssl files in another location, you can specify them in your local .env file (Or any other .env file that is ignored in git).
Use the following keys to specify the file locations: SSL_CA, SSL_CERT, SSL_KEY
FAQs
Our webpack configuration.
The npm package @gridonic/webpack receives a total of 28 weekly downloads. As such, @gridonic/webpack popularity was classified as not popular.
We found that @gridonic/webpack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.