Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@swc/core-linux-x64-musl
Advanced tools
The @swc/core-linux-x64-musl package is a precompiled version of SWC (Speedy Web Compiler) specifically for Linux x64 systems using the musl libc. SWC is a super-fast compiler written in Rust that allows for transforming ECMAScript 2015+ code into a backward-compatible version of JavaScript that can be run in older browsers. It's also capable of handling JSX, TypeScript, and producing source maps.
JavaScript/TypeScript Compilation
This feature allows for the compilation of modern JavaScript or TypeScript code into a version compatible with older browsers. The code sample demonstrates how to synchronously compile a simple ES6 const declaration into ES5.
require('@swc/core-linux-x64-musl').transformSync('const x = 1;', { jsc: { target: 'es5' } });
JSX Transformation
This feature enables the transformation of JSX syntax into JavaScript, making it possible to use React or similar libraries. The code sample shows how to transform a simple JSX element into JavaScript.
require('@swc/core-linux-x64-musl').transformSync('<div>Hello, world!</div>', { jsc: { parser: { syntax: 'typescript', tsx: true }, target: 'es5' }, filename: 'file.tsx' });
Source Map Generation
This feature generates source maps for the transformed code, facilitating debugging by mapping the transformed code back to the original source code. The code sample demonstrates generating a source map for a simple piece of code.
require('@swc/core-linux-x64-musl').transformSync('const x = 1;', { sourceMaps: true });
Babel is a widely used JavaScript compiler that also allows for transforming modern JavaScript into backward-compatible versions. Compared to @swc/core-linux-x64-musl, Babel is more established but generally slower because it is written in JavaScript.
The TypeScript compiler can convert TypeScript code into JavaScript, including handling JSX and generating source maps. While it offers similar functionality for TypeScript, it does not focus on the same performance optimization as SWC.
Esbuild is a super-fast JavaScript bundler and minifier that also compiles TypeScript and JSX. It is similar to SWC in terms of speed and efficiency because it is also written in a compiled language (Go), making it a strong alternative for certain use cases.
@swc/core-linux-x64-musl
This is the x86_64-unknown-linux-musl binary for @swc/core
[1.10.0] - 2024-12-04
(es/codegen) Use raw value for emitting JSX text (#9762) (b83c44f)
(es/compat) Fix marker for inlined helpers (#9776) (f54ec2c)
(es/minifier) Drop console
in optional chainings (#9759) (39271ad)
(es/minifier) Do not inline into the exact LHS (#9777) (985977b)
(es/minifier) Support preserve_annotations
of terser (#9775) (6e1c9fd)
(typescript) Align isolatedDeclaration
implementation with tsc (#9715) (0adad25)
(deps) Update dependency magic-string to v0.30.13 (#9747) (fa80a1e)
(deps) Update dependency magic-string to v0.30.14 (#9764) (6e46a8b)
FAQs
Super-fast alternative for babel
The npm package @swc/core-linux-x64-musl receives a total of 5,202,260 weekly downloads. As such, @swc/core-linux-x64-musl popularity was classified as popular.
We found that @swc/core-linux-x64-musl demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.