Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@marko/build
Advanced tools
Utility to build a node server from a marko file
npm install @marko/build
marko-build .
or
npx @marko/build .
marko-build .
marko-build ./my-page.marko
--output -o
: Where to write the build--static
: Build static HTML files instead of a node serverWhile @marko/build
works out-of-the box without any config, it does allow customizing and extending the default config for unique use-cases.
NOTE:
@marko/build
currently uses webpack to build projects, however, this may change in the future so it's recommended to avoid using a custom webpack config if possible.
In the most extreme case, you can use a custom webpack.config.js
. This config file is discovered based on the entry that is passed to the cli command, but given that it's a standalone config file, you can use webpack
directly to build your project as well.
To help configure webpack, @marko/build
exports a configBuilder
function that allows you to use the base config, while adding your own customizations.
webpack.config.js
import path from "path";
import { configBuilder } from "@marko/build";
import MyPlugin from "my-plugin";
const { getServerConfig, getBrowserConfigs } = configBuilder({
entry: path.join(__dirname, "target.marko"),
production: process.env.NODE_ENV === "production"
});
module.exports = [
...getBrowserConfigs(config => {
config.plugins.push(new MyPlugin());
return config;
}),
getServerConfig(config => {
config.plugins.push(new MyPlugin());
return config;
})
];
npm install @marko/build
configBuilder
Returns 3 functions: getServerConfig
, getBrowserConfig
, and getBrowserConfigs
.
entry
- the marko file to buildoutput
- where to write the buildproduction
- whether to build in production modeloadWebpackConfig
Loads a custom webpack.config.js
or creates a default array of compiler configs.
entry
- the marko file to buildoutput
- where to write the buildproduction
- whether to build in production modeFAQs
Utility to serve Marko build a server from a template
We found that @marko/build demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.