Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@swc/wasm
Advanced tools
@swc/wasm is a high-performance JavaScript/TypeScript compiler written in Rust. It provides functionalities for transforming and minifying JavaScript and TypeScript code using WebAssembly (WASM). This package is particularly useful for developers looking to optimize their build processes and improve the performance of their web applications.
Transforming JavaScript/TypeScript
This feature allows you to transform TypeScript code into JavaScript. The example code demonstrates how to transform a TypeScript snippet into ES2015 JavaScript using the @swc/wasm package.
const swc = require('@swc/wasm');
const inputCode = `const x: number = 42;`;
swc.transform(inputCode, { jsc: { parser: { syntax: 'typescript' }, target: 'es2015' } }).then(output => {
console.log(output.code);
});
Minifying JavaScript
This feature allows you to minify JavaScript code. The example code demonstrates how to minify a simple JavaScript function using the @swc/wasm package.
const swc = require('@swc/wasm');
const inputCode = `function add(a, b) { return a + b; }`;
swc.minify(inputCode).then(output => {
console.log(output.code);
});
Babel is a widely-used JavaScript compiler that allows you to use next-generation JavaScript, today. It can transform syntax, polyfill features that are missing in your target environment, and more. Compared to @swc/wasm, Babel is more mature and has a larger ecosystem of plugins and presets, but it may not be as fast as @swc/wasm due to its JavaScript implementation.
Terser is a JavaScript parser and mangler/compressor toolkit for ES6+. It is used primarily for minifying JavaScript code. Compared to @swc/wasm, Terser is focused solely on minification and does not provide the same level of transformation capabilities for TypeScript or modern JavaScript syntax.
esbuild is an extremely fast JavaScript bundler and minifier. It supports TypeScript and modern JavaScript syntax out of the box. Compared to @swc/wasm, esbuild is known for its speed and efficiency, but @swc/wasm might offer more fine-grained control over the transformation process.
[1.10.0] - 2024-12-04
(es/codegen) Use raw value for emitting JSX text (#9762) (b83c44f)
(es/compat) Fix marker for inlined helpers (#9776) (f54ec2c)
(es/minifier) Drop console
in optional chainings (#9759) (39271ad)
(es/minifier) Do not inline into the exact LHS (#9777) (985977b)
(es/minifier) Support preserve_annotations
of terser (#9775) (6e1c9fd)
(typescript) Align isolatedDeclaration
implementation with tsc (#9715) (0adad25)
(deps) Update dependency magic-string to v0.30.13 (#9747) (fa80a1e)
(deps) Update dependency magic-string to v0.30.14 (#9764) (6e46a8b)
FAQs
wasm module for swc
The npm package @swc/wasm receives a total of 444,382 weekly downloads. As such, @swc/wasm popularity was classified as popular.
We found that @swc/wasm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.