
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Pkgr is a blazing fast, and zero-configuration module bundler for web browser.
Use your favourite package manager, npm or yarn
Install globally:
yarn global add pkgr-cli
or you can install within local project:
yarn add pkgr-cli -D
Generate scaffold:
pkgr-cli init
and then develop your project:
cd YourProject && yarn && yarn start
After developing, build your project:
yarn build
Open your browser and happy coding !😗
Webpack's configuration is always hard to be understood. There are so many loaders & plugins you should use to get things work, and lots of obscure concepts. The most bad part is that the documentation is not so detailed if we want to write some plugins by our own.
So the idea of writing a module bundler just came out. The bundler itself should omit huge configuration file, be tiny and fully-featured, and focus on html which is the real entry of web apps.Pkgr has better performance, and it needs nearly zero configuration to help you getting rid of complicated config work.
Meet problems? Or just want to say something ?
Welcome to open an issue !
MIT
FAQs
Unknown package
We found that pkgr-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.