Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@hint/parser-webpack-config
Advanced tools
webhint parser needed to analyze webpack config files
@hint/parser-webpack-config
)The webpack-config
parser allows the user to analyze the webpack
configuration in their projects.
It will detect if a webpack configuration file is present in your
project, checking the name of the file (webpack.config.json
).
This package is installed automatically by webhint:
npm install hint --save-dev
To use it, activate it via the .hintrc
configuration file:
{
"connector": {...},
"formatters": [...],
"hints": {
...
},
"parsers": ["webpack-config"],
...
}
Note: The recommended way of running webhint is as a devDependency
of
your project.
This parser
emits the following events:
parse::end::webpack-config
, of type WebpackConfigParse
which contains the following information:
resource
: the parsed resource.config
: an object with a valid configuration (webpack.Configuration
).version
: the webpack version installed locally.parse::error::webpack-config::configuration
, of type WebpackConfigInvalidConfiguration
which contains the following information:
resource
: the parsed resource.error
: the error emited parsing the configuration file.parse::error::webpack-config::not-install
. This event is sent if
the package webpack
is not installed locally. This event doesn't
containt anything else.
parse::error::webpack-config::not-found
. This event is sent if
the parser doesn't find any configuration file at the end of the
scan. This event doesn't containt anything else.
If you need to import any type defined in this parser, you need to import them as follows:
import { TypeYouWantToUse } from '@hint/parser-webpack-config';
FAQs
webhint parser needed to analyze webpack config files
We found that @hint/parser-webpack-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.