Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
fly-webpack
Advanced tools
Check out the documentation to see the available options.
npm install -D fly-webpack
You can pass webpack options in with the first argument, including watch
which will greatly decrease compilation times:
export default function* () {
let webpackConfig = {
watch: true,
output: {
path: 'public'
}
}
yield this
.source("src/main.js")
.webpack(webpackConfig)
}
Or just pass in your webpack.config.js
:
export default function* () {
yield this
.source("src/main.js")
.webpack( require('./webpack.config.js') )
}
If you would like to use a different version of webpack than the one this plugin uses, pass in an optional 2nd argument:
import webpack from 'webpack'
export default function* () {
yield this
.source("src/main.js")
.webpack( require('./webpack.config.js'), webpack)
}
Pass in 3rd argument if you want to access the stats outputted from webpack when the compilation is done:
export default function* () {
yield this
.source("src/main.js")
.webpack({
/* config */
}, null, (err, stats) => {
/* Use stats to do more things if needed */
})
}
A common request is how to handle multiple entry points. You can continue to pass in an entry
option in your typical webpack config like so:
export default function* () {
yield this
.source("src/main.js")
.webpack({
entry: {
app: 'src/app.js',
test: 'test/test.js',
},
output: {
filename: '[name].js',
}
})
}
Or you can handle this with passing multiple files to source like so:
export default function* () {
yield this
.source(["src/app.js", "test/test.js"])
.webpack({
output: {
filename: '[name].js',
}
})
}
MIT © Andrew Sokolov et al
FAQs
Webpack plugin for Fly.
We found that fly-webpack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.