Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@hyrious/dts
Advanced tools
Invoke rollup-plugin-dts to generate bundled .d.ts file
npx @hyrious/dts src/index.ts -o dist/index.d.ts
-p
to enable tripple-slash doc comments (will be transformed to /** comments */
).NO_DTS
to turn the CLI to no-op, useful in local developing without type changes.[!IMPORTANT] Do not use this package as a type-checking linter. It intentionally ignores any type error to make it work with any codebase. My goal is to generate
.d.ts
files instead of checking types.
Breaking: Change --outfile
to --file
so it will be more like rollup.
Add -d
option to specify the output directory, and now it supports multiple entry points!
The input args grammar is like esbuild:
$ dts foo=src/foo.ts bar=src/buzz.ts
Will build dist/foo.d.ts and dist/bar.d.ts
Remove the json
plugin. Now json imports are externalized and the path will be rewritten to relative to the output file.
rollup-plugin-dts
(using -p
) to force emit (ignore any type error).esbuild
to *
.esbuild
to ^0.21.5
to be compatible with vite
related toolchains.--empty
option to mark modules as empty, like virtual modules.NO_DTS
env to disable dts generation when using the CLI.--alias
option to rename external modules, because rollup-plugin-dts
does not read "paths"
when they are externalized.preserveSymlinks
config, which seems work differently than setting it.rollup-plugin-dts
to 6.x (was 5.x)MIT @ hyrious
FAQs
Invoke rollup-plugin-dts to generate bundled .d.ts file
We found that @hyrious/dts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.