
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
postcss-add-dependencies
Advanced tools
PostCSS plugin to add dependencies that are necessary for webpack to understand when it needs to run recompilation on the changed files
PostCSS plugin to add dependencies that are necessary for webpack to understand when it needs to run recompilation on the changed files. This is usefull to watch config files of PostCSS plugins which do not watch it by default. For example:
mixinsDir
and mixinsFiles
optionsimportFrom
optionimportFrom
optionpostcss.config.js
file tooTo install with npm or yarn, use
npm install --save postcss-add-dependencies
// or
yarn add postcss-add-dependencies
Array of dependencies. Dependency (array item) is object with type and file/dir properties. Possible dependency types:
{ type : "dependency", file : "/abs/path/to/file.ext" }
{ type : "build-dependency", file : "/abs/path/to/file.ext" }
{ type : "missing-dependency", file : "/abs/path/to/file.ext" }
{ type : "context-dependency", file : "/abs/path/to/file.ext" }
{ type : "dir-dependency", dir : "/abs/path/to/dir" }
{ type : "asset", file : "/abs/path/to/file.ext", content : ..., sourceMap : ..., info : ... }
See https://github.com/webpack-contrib/postcss-loader/blob/v6.2.0/src/index.js#L189-L217
postcss.config.js
const path = require("path");
const dependencies = [
{ type : "dependency", file : path.resolve("/abs/path/to/file.ext") },
{ type : "dir-dependency", dir : path.resolve("/abs/path/to/dir") },
];
module.exports = {
plugins: [
// Plugins for PostCSS
['postcss-add-dependencies', { dependencies : dependencies }],
],
};
FAQs
PostCSS plugin to add dependencies that are necessary for webpack to understand when it needs to run recompilation on the changed files
The npm package postcss-add-dependencies receives a total of 330 weekly downloads. As such, postcss-add-dependencies popularity was classified as not popular.
We found that postcss-add-dependencies demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.