Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@matter/tools
Advanced tools
This package supports build and execution infrastructure for other matter.js packages.
Supports all Node.js LTS versions starting with 18.x
Matter.js consists of a large number of generated TypeScript files. We support multiple module formats targeting disparate JavaScript runtimes including Node and web browsers. We publish a moderate (and growing) number of packages to NPM. We support Linux, Windows and MacOS.
Previously, TSC analysis and test times had become quite slow. A proliferation of configuration files for TSC and test framework was adding significant redundancy to the codebase.
This package standardizes and centralizes configuration for build and test. It minimizes reliance on TSC and generally does its best to run build and test as quickly as possible.
Although Matter.js relies on third party tools for build and test, the interface is command-line oriented and unique to Matter.js. As such it will be unfamiliar to new developers.
To minimize developer burden, we also maintain traditional tsconfig.json
files with project references in each src/
and test/
. These files support traditional IDE and tsc --watch
workflows and are largely (but not entirely) ignored
by the tooling package.
These files do add configuration overhead but we minimize this with a shared tsconfig.base.json supplied by this package.
We also supply a standard .mocharc.cjs
in packages with tests. You can use this with your IDE's Mocha integration for
standard testing workflows.
We use TSC to validate TypeScript types and generate declaration files. We use esbuild for transcoding TypeScript to ESM (ES6 module format) and CJS (CommonJS module format).
The matter-build script orchestrates TSC and esbuild. It inspects package.json
for the target
module to determine whether to emit ESM, CJS or both.
Use matter-build --help
for command line usage. If you run matter-build
in a monorepo root it builds all packages
that have changed (or depend on other packages that have changed) since the last build.
matter-build
itself is implemented in TypeScript. It uses esbuild
to bootstrap itself in fresh installs.
We facilitate execution via matter-run. This command bootstraps tooling, transpiles the target module, and executes the named JS or TS script.
matter-run
understands Matter.js package.json
conventions and automatically transpiles typescript files in the
target package prior to execution.
matter-run
accepts a script to run and passes other arguments to the script verbatim.
If you set the environment variable MATTER_ECHO
, matter-run
will print the command line prior to invoking a script.
FAQs
Matter.js tooling
The npm package @matter/tools receives a total of 511 weekly downloads. As such, @matter/tools popularity was classified as not popular.
We found that @matter/tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.