Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
esbuild-dev
Advanced tools
A reloading dev server for server side TypeScript projects. Compiles TypeScript _real_ fast, on demand, using `require.extensions`, and restarts the server when things change. Similar to, and inspired by `ts-node-dev`.
A reloading dev server for server side TypeScript projects. Compiles TypeScript real fast, on demand, using require.extensions
, and restarts the server when things change. Similar to, and inspired by ts-node-dev
.
esbuild
)--watch
mode, and restarts the process when files change--supervise
to keep incremental context around on process crash, and can restart on demand in the --commands
mode--inspect
or --prof
Pretty darn new! Patches super welcome.
You deserve to get stuff done. You deserve a fast iteration loop. If you're writing TypeScript for node, you still deserve to have a fast interation loop. esbuild
loves you, and I love you, and we think you deserve it.
This tool prioritizes rebooting a node.js TypeScript project as fast as possible. If you're writing a node server that require
s a lot of code, or does heavy typechecking, running a TypeScript build every time you want to restart the server is too slow. Running a bunch of tools in a chain like tsc --watch
and nodemon
can be slow and suck up attention better spent on your actual work. This tool builds your project and then watches for changes on the filesystem (or terminal commands) to restart the process, and does everything it can to make that reload as fast as possible.
This means it doesn't typecheck. Type checking gets prohibitively slow at scale, so we recommend using a separate typechecker that still gives you the valuable feedback, but out of band so you don't have to wait for it to see if your change actually worked. We usually don't run anything other than VSCode's TypeScript integration locally, and then run a full tsc --noEmit
in CI.
Because we don't want to typecheck, we can use esbuild
for it's outrageously fast TypeScript to JavaScript compilation, and it's incremental
mode for running only the minimal amount of rebuilding necessary each time you change the filesystem. Woop woop!
Options:
--help Show help [boolean]
--version Show version number [boolean]
-c, --commands Trigger commands by watching for them on stdin. Prevents
stdin from being forwarded to the process. Only command right
now is `rs` to restart the server. [boolean] [default: false]
-w, --watch Trigger restarts by watching for changes to required files
[boolean] [default: true]
-s, --supervise Supervise and restart the process when it exits indefinitely
[boolean] [default: false]
ts-node-dev
ts-node-dev
(and ts-node
) accomplish a similar feat but are often 5-10x slower than esbuild-dev
in big projects. They are loaded with features and will keep up with new TypeScript features much better as they use the mainline TypeScript compiler sources, and we think they make lots of sense! Because they use TypeScript proper for compilation though, even with --transpile-only
, they are destined to be slower than esbuild
. esbuild-dev
is for the times where you care a lot more about performance and are ok with the tradeoffs esbuild
makes, like not supportingconst enum
and being a touch behind on supporting new TypeScript releases.
FAQs
A reloading dev server for server side TypeScript projects. Compiles TypeScript _real_ fast, on demand, using `require.extensions`, and restarts the server when things change. Similar to, and inspired by `ts-node-dev`.
The npm package esbuild-dev receives a total of 164 weekly downloads. As such, esbuild-dev popularity was classified as not popular.
We found that esbuild-dev demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.