
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
yarn global add imod
# or
sudo npm install imod -g
imod init ./hello
add these into package.json
{
"main": "dist/index.js",
"module": "dist/index.mjs",
"types": "dist/types/index.d.ts",
"scripts": {
"build": "imod build",
"dev": "imod dev"
}
}
imod dev
imod build
import Imod from 'imod'
const iMod = new IMod({
cwd: __dirname + '/../..'
})
iMod.build()
iMod.dev()
imod init ./hello --templateName=module --lite=true # If you don't use '--lite', it will try to install node_modules
package.json, ./imod.config.js, ./imod.config.json, ./imodconfig.js, ./imodconfig.json./imod.config.js -> ./imod.config.json -> imodconfig.js -> imodconfig.json -> ${package.json}.config.imodthis is the default configuration:
module.exports = {
name: moduleName, // if not set, will guess from ${package.json}.name
banner: '', // if not set, return ''
input: '', // string | string[] | null. if not set, will find src/index*{.ts,.tsx,.js,.jsx,.es6,.es,.mjs}
outDir: '', // string. default is './dist'
declarationDir: false, // string | false. if false will no typings
compilerOptions: [
{
format: 'esm',
extName: '.mjs',
target: 'esnext'
},
{
format: 'cjs',
extName: '.js',
target: 'es5'
},
{
format: 'umd',
extName: '.min.js',
target: 'es5'
}
]
}
FAQs
A bundler for tiny modules, powered by Rollup.
The npm package imod receives a total of 35 weekly downloads. As such, imod popularity was classified as not popular.
We found that imod demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.