
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
byted-react-scripts
Advanced tools
usage:
create-react-app <project-dir> --scripts-version=byted-react-scripts --template=cra-template-jyann
This package includes scripts and configuration forked from Create React App.
Please refer to its documentation:
DISABLE_SVGO
default: 'false'
If disable @svgr/svgo-plugin
, please make sure your svg file do not use xlink:href or use:id to reuse svg element.
REACT_APP_NO_CACHE
Close hard-source-webpack-plugin
TSC_COMPILE_ON_ERROR
default: 'false'
Allows users to run and properly build TypeScript projects even if there are TypeScript type check errors. (only when NO_TS_LOADER=true
will work)
NO_TS_LOADER
CONST_ENUM_JSON_FILE
default: ./typings/enums.json
REACT_APP_BUILD_MODERN
default: 'false'
whether build a assets set based on ES2015
PUBLIC_URL
default: ''
prefix url of assets injected into index.html
REACT_APP_HTML_INJECT
default: true
inject webpack assets into HTML template
--modern
已输出现代游览器的 build 结果,减少 polyfill 体积--csr
、--ssr
、--library
参数来构建不同用处的 bundlewatch
输出 bundle 到指定路径,方便其 static server、代理线上资源、开发 ssr 用
compile
将 tsx、svg、less 文件进行编译,作为 CommonJS | es2015 模块输出
FAQs
Fork from Create React App.
The npm package byted-react-scripts receives a total of 160 weekly downloads. As such, byted-react-scripts popularity was classified as not popular.
We found that byted-react-scripts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.