Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
browserify-loader
Advanced tools
A CommonJS Loader for browserify workflow [ES6 support].
browserify-loader
is another CommonJS loader for browserify workflow. With BL, You don’t need any tools like watchify, browserify-middleware to auto build and serve bundle *js in development env.
browserify-loader
is similar with requirejs, but:
define()
npm
package and all bower
components witch support CommonJS
. like underscore
, backbone
, jQuery
and so on.Download browserify-loader
with npm
or bower
:
$ npm install browserify-loader
Put browserify-loader.js
in your page:
<!DOCTYPE html>
<html>
<head>
<title></title>
</head>
<body>
<script type="text/javascript"
src="node_modules/browserify-loader/browserify-loader.js"></script>
</body>
</html>
Then, browserify-loader
will start to run for main
file in your package.json
file.
browserify-loader
has two options to specify the main
script or package
location. and browserify-loader supports coffee-script
.
<script type="text/javascript"
id="bl-script"
main="backbone/app.js"
package="backbone/"
extensions="js json 6.js jsx"
src="node_modules/browserify-loader/browserify-loader.js"></script>
app.js
in node app.js
browserify-loader
to load package.json
, then get the main entrance from main
property.browserify-loader
now supports .js
,.6.js
(ES6), json
and jsx
(for react fans).main 's priority is higher the package 's.
Look into todomvc-in-bl , which is a demo project based on todomvc to show how to use browserify-loader
.
The internal wrapper API.
Register extension to browserify-loader
, like:
var to5Transform = require('6to5/lib/6to5/transformation/transform')
define.registerExtension('jsx', function(script) {
return to5Transform(script, {modules: "common"}).code
})
browserify-loader
's performance is important, and it is not ideal now yet!
browserify-loader provide a method to get its performance: define.performance()
Just think if there is no browserify-loader, where performance cost come from:
and then thinking cost in browserify-loader:
xhr loading time, roughly equals script load time
define time, concat code, insert script tag and so on
analysis module's dependences
resolve dependences' uri, include get package.json recursively
coffee-script
registerExtension
APIjsx
and json
coffee-script
FAQs
Another CommonJS Loader[ES6 support]
We found that browserify-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.