Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
hops-build
Advanced tools
hops-build is a wrapper around webpack and hops-build-config which exports functions to execute a single build or start a webpack-dev-server
.
runBuild(options, callback)
runBuild()
can be used to execute a webpack build.
If being used with the static
option set to true
it will generate html files for all locations configured in your package.json.
If being used without the static
option it will run the webpack build for the buildConfig
and nodeConfig
(see hops-build-config for more details).
runBuild()
supports the following options:
Field | Type | Default | Description |
---|---|---|---|
static | boolean | false | Whether to statically build app shells for all locations |
clean | boolean | true | Whether to clean the build and cache directories before starting the build |
The callback
is being called after the build has finished and can be used to schedule further work.
runServer(options, callback)
runServer()
can be used to start a webpack-dev-server
. It will take the developConfig
with its watchConfig
(see hops-build-config for more details) and start a webpack-dev-server
.
runServer()
supports the following options:
Field | Type | Default | Description |
---|---|---|---|
clean | boolean | true | Whether to clean the build and cache directories before starting the server |
The callback
is being called after the server has started and can be used to schedule further work.
If you want to programmatically start a webpack build then you should use this module.
build.js
var hopsBuild = require('hops-build');
hopsBuild.runBuild({}, function() {
console.log('the build has finished');
});
FAQs
Hops wrapper around webpack to execute a build
The npm package hops-build receives a total of 52 weekly downloads. As such, hops-build popularity was classified as not popular.
We found that hops-build demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.