Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
af-webpack
Advanced tools
webpack 类工具实现的通用部分,除 koi-core 和 koi 外,其他工具比如 tiny-cli、fengdie-cli 和 bigfish 也可基于此实现。
webpack 类工具实现的通用部分,除 koi-core 和 koi 外,其他工具比如 tiny-cli、fengdie-cli 和 bigfish 也可基于此实现。
包含:
getConfig(nodeEnv, opts);
nodeEnv 可选:
opts 包含:(cwd 必选,其他可选)
封装了 dev 的运行。
dev({
webpackConfig,
appName,
extraMiddlewares,
beforeServer,
});
webpackConfig 必选,其他可选。
参数:
封装了 build 的运行。
build({
webpackConfig,
success() {},
});
webpackConfig 必选,其他可选。
参数:
目前只有一个接口:
webpack 接口,可能会通过他注册一些 webpack 插件。
允许额外的文件走 babel 转化,比如配置文件。
MIT
FAQs
Unique webpack wrapper for ant financial.
The npm package af-webpack receives a total of 856 weekly downloads. As such, af-webpack popularity was classified as not popular.
We found that af-webpack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.