Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
parcel-codegen-loader
Advanced tools
A plugin for Webpack (v4 and higher) to generate useful modules at bundle-time.
The parcel-codegen-loader
resolves import
/ require()
on a file into a Node.js module that is evaluated during the compilation. It expects the Node.js module to generate a webpack module on the fly establishing meta programming.
It follows pretty much the parcel-plugin-codegen implementation.
To begin, you'll need to install parcel-codegen-loader
:
npm install parcel-codegen-loader --save-dev
Import (or require
) the target file(s) in one of the bundle's files:
file.js
import { entries } from './file.codegen';
where file.codegen
could be written as follows:
module.exports = function() {
const entries = [1, 2, 3];
return `export const entries = ${JSON.stringify(entries)};`;
};
Then add the loader to your webpack
config. For example:
webpack.config.js
module.exports = {
module: {
rules: [
{
test: /\.codegen$/i,
use: [
{
loader: 'parcel-codegen-loader',
},
],
},
],
},
};
And run webpack
via your preferred method. This will emit file.png
as a file
in the output directory (with the specified naming convention, if options are
specified to do so) and returns the public URI of the file.
ℹ️ By default the filename of the resulting file is the hash of the file's contents with the original extension of the required resource.
(No options yet.)
The following examples show how one might use parcel-codegen-loader
and what the result would be.
Let's say you want to get a static set of users for your module from an API.
remote.codegen
const axios = require('axios');
module.exports = async function() {
const res = await axios.get('https://jsonplaceholder.typicode.com/users');
const users = res.data.map(m => ({ id: m.id, name: m.name, mail: m.email }));
return `export const users = ${JSON.stringify(users)};`;
};
You can now use the following code to retrieve this static info:
import { users } from './remote.codegen';
Contributions in any form are appreciated and much welcome!
This plugin is released using the MIT license. For more information see the LICENSE file.
FAQs
A plugin for Webpack (v4 and higher) to generate useful modules at bundle-time.
The npm package parcel-codegen-loader receives a total of 2,601 weekly downloads. As such, parcel-codegen-loader popularity was classified as popular.
We found that parcel-codegen-loader demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.