
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
fastify-vite-plugin
Advanced tools
A Fastify plugin to integrate a Vite SPA into the current project and serving both frontend and backend from the same host.
It doesn't aim to deal with server side rendering, but you can still do that from your Fastify application.
It could be an interesting use case to render HTML only if the request is made by a bot. A bot can be detected using isbot package.
It's configured to not ship Vite in production and to only serve its produced assets.
import { fastifyVitePlugin } from 'fastify-vite-plugin'
import Fastify from 'fastify'
const app = Fastify()
// place your routes before the plugin registration
// otherwise the "catch all" route that renders index.html
// for the SPA will take precedence
await app.register(fastifyVitePlugin)
await app.listen({
port: process.env.PORT,
host: process.env.NODE_ENV === 'development' ? '0.0.0.0' : undefined,
})
Example vite.config.ts
import react from '@vitejs/plugin-react-swc'
import { VitePWA } from 'vite-plugin-pwa'
import { defineConfig } from 'vite'
export default defineConfig({
plugins: [
react(),
VitePWA({
workbox: {
globPatterns: ['**/*.{js,css}'],
navigateFallback: null,
},
includeAssets: ['**/*'],
}),
],
})
The above configuration will just work in dev mode.
When you do npx vite build
for NODE_ENV=production
make sure that the output is located into /dist/assets
.
The following options need to be specified if they are changed in vite.config.ts.
viteOutDir
defaults to dist
viteAssetsDir
defaults to /assets/
relative path for where Vite stores its production assetsnpx vite build
is executed before starting the application with NODE_ENV=production
FAQs
Integrate Vite SPA into a Fastify application
The npm package fastify-vite-plugin receives a total of 0 weekly downloads. As such, fastify-vite-plugin popularity was classified as not popular.
We found that fastify-vite-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.