Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
babel-polyfills-generator
Advanced tools
Generates a script with core-js and regenerator-runtime to be used with @babel/standalone.
Generates a script with core-js
and regenerator-runtime
to be used with @babel/standalone. When @babel/polyfill was deprecated, the polyfills required in the code generated by Babel are still needed to be loaded to the browser.
This module can be installed in your project using NPM, PNPM or Yarn. Make sure, that you use Node.js version 6 or newer. Include the versions of core-js
and regenerator-runtime
, which you need:
npm i -D babel-polyfills-generator core-js regenerator-runtime
pnpm i -D babel-polyfills-generator core-js regenerator-runtime
yarn add babel-polyfills-generator core-js regenerator-runtime
Execute this script during the build of your project. It will generate full and minified scripts including source maps, which you will be able to load on your web page alongside with @babel/standalone
and the generated babel-helpers
. Specify the output directory and optionally the base name of the files, for example:
generate-babel-polyfills dist
-V, --version output the version number
-n, --name <file name> file name of the generated script (default: "babel-polyfills")
-h, --help display help for command
The full and minified files with source maps will be written to the specified directory. The extension ".js" will be appended to the file name.
$ generate-babel-polyfills dist
$ generate-babel-polyfills -n polyfills dist
In lieu of a formal styleguide, take care to maintain the existing coding style. Lint and test your code.
Copyright (c) 2022 Ferdinand Prantl
Licensed under the MIT license.
FAQs
Generates a script with core-js and regenerator-runtime to be used with @babel/standalone.
The npm package babel-polyfills-generator receives a total of 3 weekly downloads. As such, babel-polyfills-generator popularity was classified as not popular.
We found that babel-polyfills-generator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.