New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

bundle-checker

Package Overview
Dependencies
Maintainers
1
Versions
33
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

bundle-checker

CLI tool to generate stats on the size of files between two git branches

latest
Source
npmnpm
Version
1.5.0
Version published
Weekly downloads
103
30.38%
Maintainers
1
Weekly downloads
 
Created
Source

Build Status NPM Version TypeScript code style: prettier

bundle-checker 🔎📦

Compare the size of build files in two git branches.

bundle-chercker

Summary:

Usage

If cloning a private repository, please make sure the GITHUB_TOKEN env variable is available.

$ npx bundle-checker compare \
        --gitRepository='https://github.com/ramda/ramda.git' \
        --installScript='yarn' \
        --buildScript='yarn build:es' \
        --currentBranch='CrossEye-patch-1' \
        --targetBranch='master' \
        --buildFilesPatterns='build/**/*.js,build/**/*.css'

All parameters are optionals, defaults:

ParameterDefault
buildScriptNODE_ENV=production npm run build
currentBranchcurrent branch detected
gitRepositoryrepo where command is run
installScriptnpm ci
prCommentfalse
targetBranchmaster
buildFilesPatternsbuild/**/*.js,build/**/*.css

Post result as PR comment

Add --prComment to post the results as pr Comment after a CI job.

$ npx bundle-checker --prComment

The command needs 3 env variable set:

varDesc
PULL_REQUEST_NUMBERNumber of pull request
PULL_REQUEST_SLUGe.g. facebook/react
GITHUB_TOKENsecret to be setup

If you're working with Travis, no need to setup env variables PULL_REQUEST_NUMBER or PULL_REQUEST_SLUG. Those are read from TRAVIS_PULL_REQUEST and TRAVIS_PULL_REQUEST_SLUG automatically.

Develop and test locally the CLI

$ yarn pack
$ ./bin/run compare

cli scaffoling built with https://github.com/oclif/oclif

Keywords

bundle size

FAQs

Package last updated on 24 Sep 2020

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts