Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Start development of a package with pre-defined eslint, prettier, babel and rollup configuration
This package helps you to set up a new npm package blazing fast. Use eslint, prettier, babel and rollup with zero configuration.
🛠 See packsy-starter for usage example and starter kit.
npm install packsy
# or
yarn add packsy
Name | Description |
---|---|
packsy build | Builds production ready bundles with Rollup. Output directory is dist . |
packsy dev | Compiles files for development with Babel. Output directory is lib . |
packsy format | Formats all files. All Prettier cli options can be used. |
packsy lint | Lints all files. All ESLint cli options can be used. |
packsy pre-commit | Formats and lints all staged files, validates package.json . |
packsy validate | Lints all files. validates package.json . |
The package provides a default Prettier and ESLint configuration. See .prettierrc.js
and .eslintrc.js
in packsy-starter for usage.
Link the package as usual using yarn's or npm's link
/unlink
commands first. Then execute packsy dev
.
packsy dev
compiles all files with babel in watch mode, so that a file will be compiled every time that you change it.
What is the difference between packsy build
and packsy dev
?
First the output folders are different (dist
for build and lib
for dev command). Second the build command uses Rollup (with Babel) while dev uses only Babel. Using only Babel leads to faster compile times, which is useful for development. Also the dev command uses the watch mode of Babel.
This package is inspired by Kent C. Dodds's awesome package kcd-scripts.
This package is released under the MIT License.
FAQs
Start development of a package with pre-defined eslint, prettier, babel and rollup configuration
The npm package packsy receives a total of 2 weekly downloads. As such, packsy popularity was classified as not popular.
We found that packsy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.