
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
broccoli-dependency-funnel
Advanced tools
Funnels a set of files included (or excluded) from a JS dependency graph
This Broccoli plugin funnels a set of files included (or excluded) from a JS dependency graph.
In other words, you specify an ES6 module as an entry point and the plugin will walk its import graph and only copy-forward the files included in the graph. Alternatively, you can copy forward all files except those in the graph.
const DependencyFunnel = require('broccoli-dependency-funnel');
const input = 'src'; // Can be a directory or Broccoli plugin/node
module.exports = new DependencyFunnel(input, {
include: true,
entry: 'app.js',
external: [ 'lodash' ]
});
include
/ exclude
: you must specify exactly one of these options set to true
. This determines whether the files included in the dependency graph or the files excluded from the dependency graph will be funneled forward.
entry
: you must specify an entry point to the dependency graph you wish to funnel. This should be a string path relative the input directory/node.
external
: an optional array of imports to be treated as external, meaning they aren't present in the given input directory structure.
git clone <repository-url>
cd broccoli-dependency-funnel
npm install
npm run test
or npm run test:debug
FAQs
Funnels a set of files included (or excluded) from a JS dependency graph
The npm package broccoli-dependency-funnel receives a total of 9,376 weekly downloads. As such, broccoli-dependency-funnel popularity was classified as popular.
We found that broccoli-dependency-funnel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.