
Security News
AI Has Taken Over Open Source
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain
@harnessa-fe/unplugin
Advanced tools
Unified build plugin for Harnessa-FE. Supports Vite, Rspack, esbuild, and Rollup via unplugin. Webpack users should use @harnessa-fe/webpack (native plugin) instead.
Unified build plugin core for Harnessa-FE. Powers the Vite, Rspack, esbuild, and Rollup adapters.
You normally do not install this directly — install the bundler-specific package instead:
@harnessa-fe/vite@harnessa-fe/webpack — native webpack plugin (not a unplugin adapter). Required for thread-loader compatibility.pnpm add -D @harnessa-fe/unplugin
import { harnessaFE } from '@harnessa-fe/unplugin/vite';
// or '/rspack' '/esbuild' '/rollup'
Webpack users: install @harnessa-fe/webpack instead. The ./webpack subpath export has been removed because unplugin's webpack adapter serializes the plugin instance into loader options, which breaks thread-loader (the plugin holds a compiler reference and JSON.stringify trips on Compiler.root). See the changeset for details.
For custom integrations, import the raw factory:
import { unplugin, unpluginFactory } from '@harnessa-fe/unplugin';
unplugin — pre-built unplugin instance (call .vite() / .rspack() / etc.)unpluginFactory — raw factory for fully custom adapterstransformJsx — JSX/TSX source transform with location attribute injectiontransformVueSFC / transformVueTemplate — Vue SFC + template transformscreateMcpClient, installNodeLogCapture, createBuildIdentity, appendTokenQuery — internal building blocks used by @harnessa-fe/webpack to assemble a native plugin without going through unplugin's webpack adapterMIT
FAQs
Unified build plugin for Harnessa-FE. Supports Vite, Rspack, esbuild, and Rollup via unplugin. Webpack users should use @harnessa-fe/webpack (native plugin) instead.
The npm package @harnessa-fe/unplugin receives a total of 2,108 weekly downloads. As such, @harnessa-fe/unplugin popularity was classified as popular.
We found that @harnessa-fe/unplugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain

Security News
npm invalidated all granular access tokens that bypass 2FA after a fresh Mini Shai-Hulud wave compromised 323 npm packages. Staged publishing also entered public preview.

Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.