Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
disable-tree-shaking-for-chunk-plugin
Advanced tools
This plugin for Webpack can disable tree shaking for all modules contained in a specific chunk. It is intended to help improve long-term caching and code reuse between project installations and builds.
This plugin for Webpack 5 can disable tree shaking for all modules contained in specified chunks. It is intended to help improve long-term caching and code reuse between project installations and builds.
This is a Node.js module available through the npm registry. Node 8 and Webpack 4.38 or higher are required.
Installation is done using the npm install command:
$ npm install --save-dev disable-tree-shaking-for-chunk-plugin
Once installed the plugin can be added to your Webpack plugins configuration:
const DisableTreeShakingForChunk = require('disable-tree-shaking-for-chunk-plugin')
module.exports = {
//...
plugins: [
new DisableTreeShakingForChunk({
test: 'chunk-name'
})
]
}
test
(string, RegExp, Function, Array, Set)Matches the chunk name. It may be a string matched with strict equality, a regular expression for more complex string matching, a function which will receive the chunk name as an argument and should return a boolean, or an array or set of strings.
Below demonstrates part of a Webpack configuration file which sets up code splitting for a project. It has one cache group defined which will create a separate chunk for each package defined in the array.
const DisableTreeShakingForChunk = require('disable-tree-shaking-for-chunk-plugin')
const commonLibraries = ['react', 'redux', 'regenerator-runtime']
module.exports = {
optimization: {
splitChunks: {
cacheGroups: {
commonLibraries: {
test(module) {
const packageName = getPackageName(module.context)
return packageName ? commonLibraries.includes(packageName) : false
},
name(module) {
return getPackageName(module.context)
}
}
}
}
},
plugins: [
new DisableTreeShakingForChunk({
test: commonLibraries
})
]
}
By default when running Webpack in production mode it will try to track the properties exported by JavaScript modules and flag when the module is imported and which of those properties is used. It's this clever tracking of "used exports" that enables tree shaking by "pruning" any unused properties. Usually, this is a useful feature as it enables us to ship less code to our users but for cases where we'd like our compiled code to be cached for a long time or be reused by separate applications we need to disable it because how the module may be used over time and by different apps is unknown.
This plugin is based upon Webpack's internal FlagInitialModulesAsUsedPlugin
by Tobias Koppers.
This project uses Prettier for automatic code formatting and is tested with Jasmine.
This package is MIT licensed.
FAQs
This plugin for Webpack can disable tree shaking for all modules contained in a specific chunk. It is intended to help improve long-term caching and code reuse between project installations and builds.
The npm package disable-tree-shaking-for-chunk-plugin receives a total of 56 weekly downloads. As such, disable-tree-shaking-for-chunk-plugin popularity was classified as not popular.
We found that disable-tree-shaking-for-chunk-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.