Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
babel-plugin-module-alias
Advanced tools
Babel plugin to rewrite the path in require() and ES6 import
A babel plugin to rewrite (map, alias, resolve) directories as different directories during the Babel process. It's particularly useful when you have files you don't want to use with relative paths (especially in big projects).
Instead of using relative paths in your project, you'll be able to use an alias. Here an simple example:
// Instead of using this;
import MyUtilFn from '../../../../utils/MyUtilFn';
// Use that:
import MyUtilFn from 'utils/MyUtilFn';
With this plugin, you'll be able to map files or directories to the path you want.
Note: It also work for require()
.
Note 2: You can use the npm:
prefix in your plugin configuration to map a node module.
Install the plugin
$ npm install --save-dev babel babel-plugin-module-alias
Specify the plugin in your .babelrc
with the custom mapping.
{
"plugins": [
["module-alias", [
{ "src": "./src/utils", "expose": "utils" },
{ "src": "./src/components", "expose": "awesome/components" },
{ "src": "npm:lodash", "expose": "underscore" }
]]
]
}
If you're using eslint-plugin-import, you should use eslint-import-resolver-babel-module-alias to avoid having false errors.
MIT, see LICENSE.md for details.
FAQs
Babel plugin to rewrite the path in require() and ES6 import
The npm package babel-plugin-module-alias receives a total of 1,113 weekly downloads. As such, babel-plugin-module-alias popularity was classified as popular.
We found that babel-plugin-module-alias demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.