Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
apack-build
Advanced tools
基于 [apack](http://gitlab.alipay.net/geyuhang.pt/apack) 的更快的打包构建工具, 支持 `.js, .jsx, .less, .css, .json` 文件的处理.
基于 apack 的更快的打包构建工具, 支持 .js, .jsx, .less, .css, .json
文件的处理.
你可能已经发现了,我们现在的构建工具真的有点慢,时不是要带薪编译(然后加班补债)。因此,apack 应运而生,它的目标就是让构建速度快起来。
apack 是在 webpack 的思想上使用多进程并行运算和磁盘深度缓存策略架构和开发的前端构建工具。相比于 webpack 而言,其性能优势体现在,速度提升 50% ~ 97%(数据基于多个实际的中台业务项目)。具体而言,在不开启磁盘缓存的情况下,apack 构建速度比 webpack 快 50% ~ 70%;开启磁盘缓存后,apack 平均构建速度在毫秒级,比 webpack 快一个数量级。使用 apack 后,再也不会启动 tnpm run dev 后就不敢关掉了,就算重启电脑,构建也是瞬时完成。
apack 还在成长阶段,难免不稳定或功能不够强大,期待你反馈或共建!
$ tnpm install -g @alipay/apack-build
$ apack-build # 在项目根目录执行
需要注意, package.json 中请配置项目的入口 entry. 比如:
"entry": {
"index": "./src/entry/index.jsx"
}
如果你的项目有依赖外部库(比如 jQuery), 需要在 package.json 中添加 externals. 比如:
"externals": {
"jquery": "jQuery",
"react": "React"
}
$ apack-server # 在项目根目录执行
启动一个本地开发服务器.
index.html
文件所在目录, 默认为当前项目根目录apack-build 是对 apack 的封装. 直接使用 apack 可以获得更强大的功能, 比如处理更多类型的文件. 请参考此处
FAQs
基于 [apack](http://gitlab.alipay.net/geyuhang.pt/apack) 的更快的打包构建工具, 支持 `.js, .jsx, .less, .css, .json` 文件的处理.
The npm package apack-build receives a total of 1 weekly downloads. As such, apack-build popularity was classified as not popular.
We found that apack-build demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.