Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
babel-plugin-resolve-bower-module
Advanced tools
A Babel plugin to resolve imports that reference Bower modules
A Babel plugin to resolve ES6 imports that reference Bower modules.
npm install babel-plugin-resolve-bower-module --save-dev
In your .babelrc
file add the plugin to the plugins
array:
{
"plugins": [
"resolve-bower-module"
]
}
This plugin will look for import
statements where the module-name
matches a Bower module that is declared as a dependency
or a devDependency
of the project, e.g.
import foo from 'foo';
will be transformed to something like
import foo from '../../bower_components/foo/src/index';
If the plugin isn't resolving paths correctly or if your bower.json
isn't in process.cwd()
you can pass cwd
as an option to the plugin, e.g. in .babelrc
specify
{
"plugins": [
["resolve-bower-module", { "cwd": ".." }]
]
}
FAQs
A Babel plugin to resolve imports that reference Bower modules
The npm package babel-plugin-resolve-bower-module receives a total of 1 weekly downloads. As such, babel-plugin-resolve-bower-module popularity was classified as not popular.
We found that babel-plugin-resolve-bower-module demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.