Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
child-process-webpack-plugin
Advanced tools
Webpack plugin for starting child processes after each build.
$ npm install child-process-webpack-plugin
In your webpack.config.js
:
const ChildProcessPlugin = require('child-process-webpack-plugin');
module.exports = {
// ...
plugins: [
new ChildProcessPlugin('echo Hello!')
]
// ...
}
new ChildProcessPlugin(config: array | object | string)
Ideally config
is an array of child process configurations. Each config is an object with the following keys:
Key | Type | Default value | Description |
---|---|---|---|
command | String | '' | The command to be executed |
once | Boolean | false | Run the command only after the first build (true makes sense only in watch mode) |
prefix | String | '' | Each line of the process output gets prefixed with this string |
cwd | String | '.' | Working directory the process will run in |
env | Object | {PATH:process.env.PATH} | Environment variables for the child process |
If config
is an object, it's interpreted as an array with a single configuration:
new ChildProcessPlugin([config])
If config
is a string, it's interpreted as a single command:
new ChildProcessPlugin([{
command: config
}])
If you don't like the array syntax, you can create multiple instances:
module.exports = {
// ...
plugins: [
new ChildProcessPlugin(config1),
new ChildProcessPlugin(config2)
]
// ...
}
For a complete example check the test folder.
FAQs
Webpack plugin to start background processes.
We found that child-process-webpack-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.