Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Parcel is a web application bundler, differentiated by its zero configuration setup and fast performance. It supports a wide range of file types out of the box and provides features like hot module replacement, code splitting, and tree shaking.
Zero Configuration
Parcel requires no configuration to get started. You can simply point it to your entry file, and it will automatically detect and bundle all dependencies.
npx parcel index.html
Hot Module Replacement
Parcel supports Hot Module Replacement (HMR), which allows you to see changes in your application without a full reload. This is particularly useful for development as it speeds up the feedback loop.
npx parcel index.html --hmr
Code Splitting
Parcel supports code splitting, which allows you to split your code into smaller chunks that can be loaded on demand. This can improve the performance of your application by reducing the initial load time.
import('module').then(module => { /* use module */ });
Tree Shaking
Parcel automatically removes unused code from your final bundle through a process called tree shaking. This helps to reduce the size of your final bundle.
import { usedFunction } from 'module';
Webpack is a highly configurable module bundler for JavaScript applications. Unlike Parcel, Webpack requires a configuration file to get started, but it offers more flexibility and a larger ecosystem of plugins and loaders.
Rollup is a module bundler for JavaScript that focuses on ES6 modules. It is known for its smaller bundle sizes and tree-shaking capabilities. Rollup is often used for library development, whereas Parcel is more commonly used for web applications.
Esbuild is an extremely fast JavaScript bundler and minifier. It is written in Go and is designed to be much faster than other bundlers like Webpack and Parcel. However, it is less mature and has fewer features compared to Parcel.
Parcel is a zero configuration build tool for the web. It combines a great out-of-the-box development experience with a scalable architecture that can take your project from just getting started to massive production application.
See the following guides in our documentation on how to get started with Parcel.
Read the docs at https://parceljs.org/docs/.
This project exists thanks to all the people who contribute. [Contribute].
Thank you to all our backers! 🙏 [Become a backer]
Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]
FAQs
Blazing fast, zero configuration web application bundler
The npm package parcel receives a total of 170,989 weekly downloads. As such, parcel popularity was classified as popular.
We found that parcel demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.