Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
babel-preset-shopify
Advanced tools
Shopify’s org-wide set of Babel transforms.
Install this package, as well as the parts of Babel you wish to use:
With Yarn
yarn add --dev --exact babel-core babel-preset-shopify
With npm
npm install babel-core babel-preset-shopify --save-dev --save-exact
Then, in your Babel configuration (which should be under the babel
key of your package.json
), set this package as the babel preset you’d like to use:
{
"babel": {
"presets": ["babel-preset-shopify/web"]
}
}
This packages comes with several different presets for you to use, depending on your project:
babel-preset-shopify
: The same as babel-preset-shopify/web
.
babel-preset-shopify/web
: A preset to use for JavaScript that is meant to run in browsers. It compiles down features to only those supported by browsers that you have specified in your browserslist config. Note that many modern JavaScript features, like Map
s, Set
s, for of
loops, and more, require runtime polyfills (we recommend @shopify/polyfills
, as our web
and node
configs will reduce these imports to the set of features needed to polyfill your target environment).
This preset accepts an options object. The following options are allowed:
modules
, a boolean indicating whether native ES2015 modules should be transpiled to CommonJS equivalents. Set this option to false
when you are using a bundler like Rollup or Webpack 2:
{
"babel": {
"presets": [
["babel-preset-shopify/web", {"modules": false}]
]
}
}
browsers
, a browserslist string or array, which specifies which browsers to transpile for. We recommend setting your target browsers using a browserslist
key in package.json
, as that method will automatically be used by all browserslist-compatible tools.
{
"babel": {
"presets": [
["babel-preset-shopify/web", {
"browsers": ["last 3 versions"]
}]
]
}
}
typescript
, a boolean (defaults to false
) to turn on @babel/preset-typescript
and other plugins that allow babel to read typescript files directly.
inlineEnv
, a boolean (defaults to false
) to automatically replace process.env.<VAR>
statements with the corresponding environment variable.
debug
, a boolean (defaults to false
) to turn on @babel/preset-env
debugging.
corejs
, a number of string that will be used to set the corejs
version to use
useBuiltIns
, a string that is passed to the useBuiltIns
option of @babel/preset-env
babel-preset-shopify/node
: This preset transpiles features to a specified version of Node, defaulting to the currently active version. It accepts an options object. The modules
, typescript
, inlineEnv
,debug
, corejs
and useBuiltIns
options do the same thing they do in babel-preset-shopify/web
, detailed above. You can also pass a version of Node to target during transpilation using the version
option:
{
"babel": {
"presets": [
["babel-preset-shopify/node", {
"modules": false,
"version": 4
}]
]
}
}
babel-preset-shopify/react
: Adds plugins that transform React (including JSX). You can use this preset with the babel-preset-shopify/web
or babel-preset-shopify/node
configuration.
This preset accepts an options object.
hot
: Will automatically add plugins to enable hot reloading of React components. Note that this requires you to have a recent version of react-hot-loader
installed as a dependency in your project.pragma
: Replace the function used when compiling JSX expressions. Defaults to React.createElement
.pragmaFrag
: Replace the function used when compiling JSX fragment expressions. Defaults to React.Fragment
.{
"babel": {
"presets": [
["babel-preset-shopify/react", {"hot": true}]
]
}
}
As noted above, you can include multiple of these presets together. Some common recipes are shown below:
// A React project without any server component, using sprockets-commoner for bundling
{
"babel": {
"presets": [
"babel-preset-shopify/web",
"babel-preset-shopify/react"
]
}
}
// A Node project using Rollup to create a single bundle
{
"babel": {
"presets": [
["babel-preset-shopify/node", {"modules": false}]
]
}
}
FAQs
Shopify's org-wide Babel preset
The npm package babel-preset-shopify receives a total of 7,129 weekly downloads. As such, babel-preset-shopify popularity was classified as popular.
We found that babel-preset-shopify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.