Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
babel-minify-webpack-plugin
Advanced tools
npm install babel-minify-webpack-plugin --save-dev
// webpack.config.js
const MinifyPlugin = require("babel-minify-webpack-plugin");
module.exports = {
entry: //...,
output: //...,
plugins: [
new MinifyPlugin(minifyOpts, pluginOpts)
]
}
minifyOpts
are passed on to babel-preset-minify. You can find a list of all available options in the package directory.
Default: {}
test
: Test to match files against. Default: /\.js($|\?)/i
include
: Files to include
. Default: undefined
exclude
: Files to exclude
. Default: undefined
comments
: Preserve Comments. Default: /^\**!|@preserve|@license|@cc_on/
, falsy value to remove all comments. Accepts function, object with property test (regex), and values.sourceMap
: Configure a sourcemap style. Default: webpackConfig.devtoolparserOpts
: Configure babel with special parser options.babel
: Pass in a custom babel-core
instead. Default: require("babel-core")
minifyPreset
: Pass in a custom babel-minify
preset instead. Default: require("babel-preset-minify")
You can also use babel-loader for webpack and include minify
as a preset and should be much faster than using this - as babel-minify will operate on smaller file sizes. But then, why does this plugin exist at all? -
mangle: { topLevel: true }
in minifyOptions.node_modules
from being run through the babel-loader, babel-minify optimizations are not applied to the excluded files as it doesn't pass through the minifier.
Boopathi Rajaa |
Juho Vepsäläinen |
Joshua Wiens |
Kees Kluskens |
Sean Larkin |
FAQs
babel-minify plugin for webpack
The npm package babel-minify-webpack-plugin receives a total of 12,840 weekly downloads. As such, babel-minify-webpack-plugin popularity was classified as popular.
We found that babel-minify-webpack-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.