
Security News
TeamPCP and BreachForums Launch $1,000 Contest for Supply Chain Attacks
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.
@yifancong/bundle-actions
Advanced tools
This is a simplified GitHub Action for checking file compression size differences before and after code changes.
path-filename-commithash.extension- uses: ./
with:
# GitHub token for API access
github_token: ${{ secrets.GITHUB_TOKEN }}
# File path to upload (relative to project root)
file_path: 'artifacts/1.json'
# Target branch (defaults to main)
target_branch: 'main'
Artifacts will be named using the following format:
path-filename-commithash.extensionartifacts-1-f18c5686ba.jsonon:
pull_request:
types: [opened, synchronize]
The Action will:
on:
push:
branches: [main]
The Action will:
The Action will generate a report card in the following format in GitHub CI:
| Metric | Current | Baseline |
|---|---|---|
| 📊 Total Size | 100.0 MB | 99.0 MB |
| 📁 Files Count | 3 | 3 |
| File | Size |
|---|---|
| dist/main.js | 50.0 MB |
| dist/vendor.js | 40.0 MB |
| dist/styles.css | 10.0 MB |
The JSON file pointed to by your file_path should contain data in the following format:
{
"totalSize": 104857600,
"files": [
{
"path": "dist/main.js",
"size": 52428800,
"gzipSize": 10485760,
"brotliSize": 8388608
},
{
"path": "dist/vendor.js",
"size": 41943040
}
]
}
totalSize: Total size (in bytes)files: File list, each file contains path and size informationWhen real artifacts from the target branch cannot be found, the Action will automatically use built-in demo data as baseline for comparison:
{
"totalSize": 103809024, // ~99MB
"files": [
{
"path": "dist/main.js",
"size": 51380224 // ~49MB
},
{
"path": "dist/vendor.js",
"size": 41943040 // ~40MB
},
{
"path": "dist/styles.css",
"size": 10485760 // ~10MB
}
]
}
This way, even on first run or when there's no historical data, meaningful comparison reports can be generated to help developers understand the current build size situation.
# Install dependencies
npm install
# Build
npm run build
FAQs
A GitHub Action for bundle size analysis and reporting
The npm package @yifancong/bundle-actions receives a total of 2 weekly downloads. As such, @yifancong/bundle-actions popularity was classified as not popular.
We found that @yifancong/bundle-actions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.