Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
atatus-sourcemap-webpack-plugin
Advanced tools
A Webpack plugin to upload sourcemaps to Atatus after build
This is a Webpack plugin that simplifies uploading the sourcemaps, generated from a webpack build, to Atatus.
Production JavaScript bundles are typically minified before deploying, making Atatus stacktraces pretty useless unless you take steps to upload the sourcemaps. You may be doing this now in a shell script, triggered during your deploy process, that makes curl posts to the Atatus API. This can be finicky and error prone to setup. AtatusSourceMapPlugin aims to remove that burden and automatically upload the sourcemaps when they are emitted by webpack.
Install the plugin with npm:
$ npm install atatus-sourcemap-webpack-plugin --save-dev
An example webpack.config.js:
const AtatusSourceMapPlugin = require('atatus-sourcemap-webpack-plugin')
const JS_PUBLIC_URL = 'https://my.cdn.net/assets'
const webpackConfig = {
entry: 'index',
url: JS_PUBLIC_URL,
output: {
path: 'dist',
filename: 'index-[hash].js'
},
plugins: [new AtatusSourceMapPlugin({
adminAPIKey: 'aaaabbbbccccddddeeeeffff00001111',
version: 'version_string_here',
url: JS_PUBLIC_URL
})]
}
You can pass a hash of configuration options to AtatusSourceMapPlugin
.
Allowed values are as follows:
adminAPIKey: string
(required)Your atatus project admin API Key
version: string
(required)A string identifying the version of your code this source map package is for. Typically this will be the full git sha.
url: string
(required)The base url for the cdn where your production bundles are hosted.
includeChunks: string | [string]
(optional)An array of chunks for which sourcemaps should be uploaded. This should correspond to the names in the webpack config entry
field. If there's only one chunk, it can be a string rather than an array. If not supplied, all sourcemaps emitted by webpack will be uploaded, including those for unnamed chunks.
silent: boolean
(default: false
)If false
, success and warning messages will be logged to the console for each upload. Note: if you also do not want to see errors, set the ignoreErrors
option to true
.
ignoreErrors: boolean
(default: false
)Set to true
to bypass adding upload errors to the webpack compilation. Do this if you do not want to fail the build when sourcemap uploads fail. If you do not want to fail the build but you do want to see the failures as warnings, make sure silent
option is set to false
.
atatusEndpoint: string
(default: https://api.atatus.com/api/browser/sourcemap
)A string defining the Atatus API endpoint to upload the sourcemaps to. It can be used for self-hosted Atatus instances.
code_version
parameter must match the version
parameter used for the plugin.A minimal single page app with webpack build. The app includes a local Express server that serves an index.html. The build is meant to mimic a production build in that js bundles.
To run the example:
examples/react/webpack.config.babel.js
$ cd examples/react
$ npm run build
$ npm start
When the example app is loaded in a browser, the app will throw an error, which will be sent to Atatus. You should be able to log in to Atatus and see the error with stacktrace with line numbers that map to the original source.
See the Contributors Guide
FAQs
A Webpack plugin to upload sourcemaps to Atatus after build
The npm package atatus-sourcemap-webpack-plugin receives a total of 7 weekly downloads. As such, atatus-sourcemap-webpack-plugin popularity was classified as not popular.
We found that atatus-sourcemap-webpack-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.