
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
esbuild-plugin-browserify-adapter
Advanced tools
Use Browserify transforms as esbuild plugins.
The package is released to npm as esbuild-plugin-browserify-adapter
:
npm install esbuild-plugin-browserify-adapter -D
This adapter lets you use any existing Browserify transform as an esbuild plugin. The plugin function can be passed an arbitrary number of transforms. Just like with Browserify itself, options are passed by wrapping the transform in an array and appending the options to that list.
Please note: This module does not work with Browserify plugins.
const esbuild = require('esbuild')
const coffeeify = require('coffeeify') // any transform works
const browserifyAdapter = require('esbuild-plugin-browserify-adapter')
esbuild.build({
entryPoints: ['./app.coffee'],
bundle: true,
plugins: [browserifyAdapter(coffeeify)],
outdir: './public'
})
const esbuild = require('esbuild')
const envify = require('envify') // any transform works
const browserifyAdapter = require('esbuild-plugin-browserify-adapter')
esbuild.build({
entryPoints: ['./app.js'],
bundle: true,
plugins: [browserifyAdapter([envify, { BUNDLE_TIME: new Date().toJSON() }])],
outdir: './public'
})
In case you need to use multiple transforms, pass all of them to the adapter at once. Just like in Browserify, they will be run in the order given.
const esbuild = require('esbuild')
const coffeeify = require('coffeeify') // any transform works
const envify = require('envify') // any transform works
const browserifyAdapter = require('esbuild-plugin-browserify-adapter')
esbuild.build({
entryPoints: ['./app.coffee'],
bundle: true,
plugins: [browserifyAdapter(
coffeeify,
[envify, { BUNDLE_TIME: new Date().toJSON() }]
)],
outdir: './public'
})
This plugin can help you with gradually migrating a Browserify-based setup to an esbuild-based one without having to change everything at once. It is not intended to be used as a permanent solution unless your transform usage is very limited.
New versions can be released using npm version <patch|minor|major>
.
Copyright 2021 Frederik Ring - Available under the Mozilla Public License 2.0
0.1.5
dc0e556
Run tests in GitHub actions38d632b
Big files are truncated inadvertentlyca72664
Bump json5 from 1.0.1 to 1.0.2 (dependabot[bot])
Bumps json5 from 1.0.1 to 1.0.2.
updated-dependencies:
- dependency-name: json5 dependency-type: indirect ...
Signed-off-by: dependabot[bot] support@github.com
13fe8f8
Bump minimatch from 3.0.4 to 3.1.2 (dependabot[bot])
Bumps minimatch from 3.0.4 to 3.1.2.
updated-dependencies:
- dependency-name: minimatch dependency-type: indirect ...
Signed-off-by: dependabot[bot] support@github.com
e671b36
Bump minimist from 1.2.5 to 1.2.6 (dependabot[bot])
Bumps minimist from 1.2.5 to 1.2.6.
updated-dependencies:
- dependency-name: minimist dependency-type: indirect ...
Signed-off-by: dependabot[bot] support@github.com
fb47b68
Bump path-parse from 1.0.6 to 1.0.7 (dependabot[bot])
Bumps path-parse from 1.0.6 to 1.0.7.
updated-dependencies:
- dependency-name: path-parse dependency-type: indirect ...
Signed-off-by: dependabot[bot] support@github.com
2e3cb4a
Bump glob-parent from 5.1.1 to 5.1.2 (dependabot[bot])
Bumps glob-parent from 5.1.1 to 5.1.2.
updated-dependencies:
- dependency-name: glob-parent dependency-type: indirect ...
Signed-off-by: dependabot[bot] support@github.com
d0f151b
run npm auditFAQs
Use Browserify transforms as esbuild plugins
The npm package esbuild-plugin-browserify-adapter receives a total of 478 weekly downloads. As such, esbuild-plugin-browserify-adapter popularity was classified as not popular.
We found that esbuild-plugin-browserify-adapter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.