Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@preconstruct/cli
Advanced tools
Dev and build your code painlessly in monorepos
Assuming you already have a source file at src/index.js (or src/index.ts) or you're using Yarn Workspaces and have packages with src/index.js (or src/index.ts), you can setup Preconstruct like this.
yarn add --dev @preconstruct/cli
yarn preconstruct init
If you're in a monorepo, you should also run yarn preconstruct dev
and add it to a postinstall script("postinstall": "preconstruct dev"
) that runs preconstruct dev so that you can import your code without having to rebuild your project every time in changes.
Before you publish packages to npm, run preconstruct build
. reconstruct will use your Babel config and build flat bundles so make sure to configure Babel with the transforms you want.
We strongly recomment making a single script in your package.json that runs both build and publish, to stop broken publishes, such as
"release": "preconstruct build && yarn publish:packages
. If you're in a single-package repo, you could also runpreconstruct build
in aprepare
orprepublishOnly
script.
There are a number of tasks that become easier with preconstruct that lie slightly outside the main workflow. Check out the following guides for setting these up.
FAQs
Dev and build your code painlessly in monorepos
We found that @preconstruct/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.