
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
fis3-packager-map
Advanced tools
fis3 中内嵌的打包工具。
$ vi path/to/project/fis-conf.js
fis.match('*.css', {
packTo: '/pkg/all.css'
});
fis.match('*.js', {
packTo: '/pkg/all.js'
});
或者:
fis.match('::package', {
packager: fis.plugin('map', {
'pkg/all.js': [
'libs/*.js',
'widget/*.js'
]
})
})
{'pkg/xxx': [...], ...} 的格式也可用于 fis.set("pack", ) 或 fis-pack.json 来设置。
规则优先级:
通过插件配置 > fis.set("pack", {}) > fis-pack.json > match( 'xxx' , {`packTo`})
## 配置项
1. `useTrack` 默认 `true`。 是否将合并前的文件路径写入注释中,方便定位代码。
2. `useSourceMap` 默认为 `false`。是否开启 souremap 功能。
### 关闭输出路径信息
默认打包后输出路径信息,便于调试.形式如下
```js
/*!/components/underscore/underscore.js*/
可以在插件的配置中关闭路径信息输出
fis.match('::package', {
packager: fis.plugin('map', {
useTrack : false, // 是否输出路径信息,默认为 true
'pkg/all.js': [
'libs/*.js',
'widget/*.js'
]
})
})
fis.match('::package', {
packager: fis.plugin('map', {
useSourceMap : true, // 合并后开启 SourceMap 功能。
'pkg/all.js': [
'libs/*.js',
'widget/*.js'
]
})
})
FAQs
A packager plugin for fis to pack resources.
The npm package fis3-packager-map receives a total of 224 weekly downloads. As such, fis3-packager-map popularity was classified as not popular.
We found that fis3-packager-map demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.