
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
kcd-common-tools
Advanced tools
Common build tools for projects by Kent C. Dodds
This still needs a little bit of work, but here's some stuff you may want to do when starting a project with kcd-common-tools:
npm i -D kcd-common-tools@1.0.0-beta.10 webpack webpack-dev-server karma karma-chai karma-mocha istanbul isparta karma-chrome-launcher karma-firefox-launcher babel babel-core babel-loader node-libs-browser mocha chai with-package sinon uglify-loader lodash karma-webpack karma-sinon sinon isparta-loader ghooks eslint eslint-loader codecov.io babel-eslint angular-mocks angular
Note, this happens as part of the installation of kcd-common-tools
ln -s node_modules/kcd-common-tools/shared/link/editorconfig .editorconfig && ln -s node_modules/kcd-common-tools/shared/link/eslintignore .eslintignore && ln -s node_modules/kcd-common-tools/shared/link/gitignore .gitignore && ln -s node_modules/kcd-common-tools/shared/link/npmignore .npmignore
cp node_modules/kcd-common-tools/shared/copy/* .
Overrides exist in the package.json under the property kcdCommon. They can either be overrides themselves or point
to a file which contains the overrides. Examples of overrides:
{
"kcdCommon": {
"webpack": {
"output": { "library": "myLib" }
},
"karma": {
"autoWatchBatchDelay": 300
}
}
}
{
"kcdCommon": {
"webpack": "scripts/webpack-overrides.js",
"karma": "scripts/karma-overrides.js"
}
}
Overrides can take several forms. You can have it be an object that is deep merged with the defaults for all environments. You can also nest overrides based on environment and have the overrides apply only for a particular NODE_ENV. For example:
{
"webpack": {
"development": {
},
"test": {
},
"production": {
}
}
}
Also, if you put your overrides in a separate file, you can make your overrides be a function which returns the resulting configuration (you manage merging yourself in this case). For example:
var _ = require('lodash');
module.exports = webpackOverrides;
function webpackOverrides(defaultConfig) {
var newConfig = _.cloneDeep(defaultConfig);
// modifications
return newConfig;
}
Here are some handy scripts you may want to have:
{
"scripts": {
"build:dev": "NODE_ENV=development webpack --config node_modules/kcd-common-tools/shared/webpack.config.js --progress --colors",
"build:prod": "NODE_ENV=production webpack --config node_modules/kcd-common-tools/shared/webpack.config.js --progress --colors",
"build": "npm run build:dev & npm run build:prod",
"check-coverage": "./node_modules/istanbul/lib/cli.js check-coverage --statements 80 --functions 80 --lines 80 --branches 80",
"ci": "npm run eslint && npm run test:single && npm run check-coverage && npm run build",
"eslint": "eslint src/ -c node_modules/kcd-common-tools/shared/test.eslintrc",
"release": "npm run build && with-package git commit -am pkg.version && with-package git tag pkg.version && git push && npm publish && git push --tags",
"release:beta": "npm run release && npm run tag:beta",
"report-coverage": "cat ./coverage/lcov.info | codecov",
"start": "npm run test",
"test": "COVERAGE=true NODE_ENV=test karma start",
"test:single": "COVERAGE=true NODE_ENV=test karma start --single-run",
"test:debug": "NODE_ENV=test karma start --browsers Chrome",
"tag:beta": "with-package npm dist-tag add pkg.name@pkg.version beta"
}
}
FAQs
Common build tools for projects by Kent C. Dodds
We found that kcd-common-tools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.