Security News
vlt Debuts New JavaScript Package Manager and Serverless Registry at NodeConf EU
vlt introduced its new package manager and a serverless registry this week, innovating in a space where npm has stagnated.
@metamask/snaps-webpack-plugin
Advanced tools
A plugin for developing MetaMask Snaps using Webpack. This can be used as alternative to the mm-snap
CLI build
command. It transforms the bundle to fix common issues with SES. For a list of changes the plugin makes, you can refer to the source code.
Use Node.js 16.0.0
or later. We recommend using nvm for managing Node.js versions.
Install a dependency in your snap project using yarn
or npm
:
npm install @metamask/snaps-webpack-plugin
yarn add @metamask/snaps-webpack-plugin
Add the plugin to the plugins
array in your Webpack configuration:
// webpack.config.js
import SnapsWebpackPlugin from '@metamask/snaps-webpack-plugin';
export default {
plugins: [new SnapsWebpackPlugin(options)],
};
All options are optional, and default to true
.
import { Options } from '@metamask/snaps-webpack-plugin';
const options: Options = {
/**
* Whether to strip all comments from the bundle.
*/
stripComments: true,
/**
* Whether to evaluate the bundle with SES, to ensure SES compatibility.
*/
eval: true,
/**
* The path to the Snap manifest file. If set, it will be checked and automatically updated with
* the bundle's hash, if `writeManifest` is enabled. Defaults to `snap/manifest.json` in the
* current working directory.
*/
manifestPath: './snap.manifest.json',
/**
* Whether to write the updated Snap manifest file to disk. If `manifestPath` is not set, this
* option has no effect. If this is disabled, an error will be thrown if the manifest file is
* invalid.
*/
writeManifest: true,
};
FAQs
Unknown package
We found that @metamask/snaps-webpack-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt introduced its new package manager and a serverless registry this week, innovating in a space where npm has stagnated.
Security News
Research
The Socket Research Team uncovered a malicious Python package typosquatting the popular 'fabric' SSH library, silently exfiltrating AWS credentials from unsuspecting developers.
Security News
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.