
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
rollup-plugin-analyzer
Advanced tools
Mad metrics for your rollup bundles, know all the things
See what's bloating your bundle, how treeshaking has treated you, and other great stuff. Perfect for console printing an analysis of your bundle or integrating in your CI workflows.
Adding as a plugin to your rollup config or build script will allow you to print a well formatted analysis to the console upon bundling or get a full analysis object for CI purposes.
If using Rollup's CLI to bundle with no additional config, pass
-c node:rollup-config-analyzer
to print a well formatted analysis to your console.
$ npm install --save-dev rollup-plugin-analyzer
import { plugin as analyze } from 'rollup-analyzer-plugin'
const opts = {limit: 5, filter: [], root: __dirname}
export default {
entry: 'module.js',
dest: 'index.js',
format: 'cjs',
plugins: [analyze(opts)]
}
import { rollup } from 'rollup'
import { plugin as analyze } from 'rollup-analyzer-plugin'
const opts = {limit: 5, filter: [], root: __dirname}
rollup({
entry: 'main.js',
plugins: [analyze(opts)]
}).then(...)
logged to console on rollup completion
-----------------------------
Rollup File Analysis
-----------------------------
bundle size: 2.809 KB
original size: 11.384 KB
code reduction: 75.33 %
-----------------------------
file: \test\fixtures\import-d.js
bundle space: 90.64 %
rendered size: 2.546 KB
original size: 2.57 KB
code reduction: 0.93 %
dependents: 1
- \test\fixtures\import-c.js
-----------------------------
file: \test\fixtures\bundle.js
bundle space: 4.27 %
rendered size: 120 Bytes
original size: 267 Bytes
code reduction: 55.06 %
dependents: 0
-----------------------------
file: \test\fixtures\import-c.js
bundle space: 2.95 %
rendered size: 83 Bytes
original size: 161 Bytes
code reduction: 48.45 %
dependents: 1
- \test\fixtures\import-b.js
...
false
null
null
process.cwd()
false
null
null
module
analysis objects
MIT © Andrew Carpenter
FAQs
Mad metrics for your rollup bundles, know all the things
The npm package rollup-plugin-analyzer receives a total of 42,075 weekly downloads. As such, rollup-plugin-analyzer popularity was classified as popular.
We found that rollup-plugin-analyzer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.