Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@hyrious/dts
Advanced tools
Invoke rollup-plugin-dts to generate bundled .d.ts file
npx @hyrious/dts src/index.ts -o dist/index.d.ts
-p
to enable tripple-slash doc comments (will be transformed to /** comments */
).NO_DTS
to turn the CLI to no-op, useful in local developing without type changes.[!IMPORTANT] Do not use this package as a type-checking linter. It intentionally ignores any type error to make it work with any codebase. My goal is to generate
.d.ts
files instead of checking types.
Breaking: Change --outfile
to --file
so it will be more like rollup.
Add -d
option to specify the output directory, and now it supports multiple entry points!
The input args grammar is like esbuild:
$ dts foo=src/foo.ts bar=src/buzz.ts
Will build dist/foo.d.ts and dist/bar.d.ts
Remove the json
plugin. Now json imports are externalized and the path will be rewritten to relative to the output file.
rollup-plugin-dts
(using -p
) to force emit (ignore any type error).esbuild
to *
.esbuild
to ^0.21.5
to be compatible with vite
related toolchains.--empty
option to mark modules as empty, like virtual modules.NO_DTS
env to disable dts generation when using the CLI.--alias
option to rename external modules, because rollup-plugin-dts
does not read "paths"
when they are externalized.preserveSymlinks
config, which seems work differently than setting it.rollup-plugin-dts
to 6.x (was 5.x)MIT @ hyrious
FAQs
Invoke rollup-plugin-dts to generate bundled .d.ts file
We found that @hyrious/dts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.