Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
ember-cli-ifa
Advanced tools
Inject fingerprinted assetMap.json file into your app and provide initializer, service, and helper to dynamically reference fingerprinted assets.
Inject fingerprinted assetMap.json file into your app and provide initializer, service, and helper to dynamically reference fingerprinted assets.
When to use this addon?
imagePath: computed(function() {
return this.get('assetMap').resolve(`${this.get('image')}.png`);
})
ember install ember-cli-ifa
Enable addon in environment.js
for specific environment.
module.exports = function(environment) {
var ENV = {
...
ifa: {
enabled: true,
inline: false,
}
...
};
In case you use s3 and manifest module for ember-cli-deploy, update their configurations in config/deploy.js
to include json
as a valid file.
module.exports = function(environment) {
var ENV = {
...
s3: {
filePattern: function(context, pluginHelper) {
let filePattern = pluginHelper.readConfigDefault('filePattern');
return filePattern.replace('}', ',json}');
},
...
},
manifest: {
filePattern: function(context, pluginHelper) {
let filePattern = pluginHelper.readConfigDefault('filePattern');
return filePattern.replace('}', ',json}');
},
...
},
...
};
Configure fingerprinting in ember-cli-build.js
. Refer to the documentation of ember-cli for asset-compilation
fingerprint: {
enabled: true, // set to true only in required environments
generateAssetMap: true,
fingerprintAssetMap: true
}
Note that if you use fastboot, this addon is automatically forced into inline: true
mode.
This is necessary, as otherwise fastboot could not easily access that data.
If name
is tomster-under-construction
:
<img src={{asset-map (concat "assets/" name ".png")}} />
then it will generate something like assets/tomster-under-construction-da524c8bc9283f759ae640b68db81f24.png
based on assetMap.json.
import Component from 'ember-component';
import service from 'ember-service/inject';
export default Component.extend({
assetMap: service('asset-map'),
key: null, // key passed as 'tomster-under-construction'
// result will be assets/tomster-under-construction-da524c8bc9283f759ae640b68db81f24.png
image: computed('key', function() {
return this.get('assetMap').resolve(`assets/${this.get('key')}.png`);
})
});
If prepend
option is added in fingerprint configuration block, it will be prepended into
generated asset path in the index.html.
// ember-cli-build.js
// ...
var app = new EmberApp(defaults, {
fingerprint: {
prepend: '/blog/'
}
});
/blog
will be prepended to the assetMap file path in the index.html.
If inline: true
is specified in the config, contents of assetMap file will be inline into index.html.
This might save one request to assetMap.json, but will increase overall size of index.html
file, so use carefully.
See the Contributing guide for details.
This project is licensed under the MIT License.
v0.10.0 (2020-06-10)
FAQs
Inject fingerprinted assetMap.json file into your app and provide initializer, service, and helper to dynamically reference fingerprinted assets.
The npm package ember-cli-ifa receives a total of 1,185 weekly downloads. As such, ember-cli-ifa popularity was classified as popular.
We found that ember-cli-ifa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.