Security News
PyPI Introduces Digital Attestations to Strengthen Python Package Security
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
@web/dev-server-rollup
Advanced tools
Use rollup plugins in web dev server and web test runner.
Web dev server plugins and rollup plugins share a very similar API, making it possible to reuse rollup plugins inside web dev server with an adapter.
Since the dev server doesn't run an actal rollup build, only rollup plugins which do single file transformations can be reused.
npm i --save-dev @web/dev-server-rollup
Import the rollup plugin and the rollupAdapter
function in your configuration file. Then, wrap the rollup plugin with the adapter function:
const replace = require('@rollup/plugin-replace');
const { rollupAdapter } = require('@web/dev-server-rollup');
module.exports = {
plugins: [rollupAdapter(replace({ include: ['src/**/*.js'], __environment__: '"development"' }))],
};
Some rollup plugins do expensive operations. During development, this matters a lot more than during a production build. It's recommended to always scope the usage of plugins using the include
and/or exclude
options available in most rollup plugins.
The rollup build process assumes that any imported files are are meant to be compiled to JS, web dev server serves many different kinds of files to the browser. If you are transforming a non-standard filetype to JS, for example .json files, you need to instruct the server to handle it as a JS file:
const json = require('@rollup/plugin-json');
const { rollupAdapter } = require('@web/dev-server-rollup');
module.exports = {
plugins: [
{
name: 'json-mime-type-plugin',
resolveMimeType(context) {
if (context.path.endsWith('.json')) {
return 'js';
}
},
},
rollupAdapter(json()),
],
};
Since es-dev-server doesn't do any bundling, only the following lifecycle hooks from rollup are called:
Plugins that use other lifecycle hooks are mostly build optimizations and are not interesting during development.
The following rollup plugins have been tested to work correctly:
The following rollup plugins don't work correctly at the moment:
FAQs
Use rollup plugins in @web/dev-server
The npm package @web/dev-server-rollup receives a total of 0 weekly downloads. As such, @web/dev-server-rollup popularity was classified as not popular.
We found that @web/dev-server-rollup demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.