
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
rollup-plugin-hot-css
Advanced tools
A generic CSS loader for Rollup. Supports Hot Module Replacement when used with Nollup. If the CSS imports any assets such as images or fonts, those URLs are resolved with assets emitted.
npm install rollup-plugin-hot-css
let hotcss = require('rollup-plugin-hot-css');
module.exports = {
...
plugins: [
hotcss({
file: 'styles.css',
extensions: ['.css', '.scss'],
loaders: ['scss'],
hot: true
})
]
}
String file - Output file name. Default is styles.css
. The final name of this file will be based on assetsFileName
Rollup output option.
Array extensions - Extensions to run the plugin for. Default is .css, .scss, .less
Function loaders - Array of preprocessors to run. Can accept either a string or a function. The only supported strings are scss
and less
(note: they must be installed). Passing a custom loader can be done using a function. The function will receive input
and id
. input
will contain code
and map
with the code and sourcemap so far.
Boolean hot - Enable hot module replacement using <link> tag. This should be disabled if building for production. Default is false
.
Boolean url - Enable resolving URLs found in CSS file and export those assets. This will resolve after all other loaders. Sourcemaps must be emitted by the previous loader for this to work. Default is true
.
String publicPath - Used by HMR. If the app is not being hosted on the root of the domain but instead in a subdirectory, use this option to provide the path prefix. Default is /
.
There are two built in loaders: scss
and less
. Custom loaders can be specified, as described below:
function MyCustomLoader (input, id) {
// input.code
// input.map
// input.watchFiles
return {
code: /* transformed code as a string */,
map: /* source map */,
watchFiles: /* optional extra files to watch for changes */
}
}
hotcss({
loaders: ['scss', MyCustomLoader]
})
Loaders can also be asynchronous by returning a Promise:
function MyCustomLoader (input, id) {
return new Promise(resolve => ({
code: /* transformed code as a string */,
map: /* source map */,
watchFiles: /* optional extra files to watch for changes */
}));
}
An example using postcss
:
let autoprefixer = require('autoprefixer')
let postcss = require('postcss')
function PostCSSLoader (input, id) {
return postcss([autoprefixer]).process(input.code).then(res => {
return {
code: res.css
};
});
}
hotcss({
loaders: ['scss', PostCSSLoader]
})
The HMR API expects there to be a link
tag inside the index.html
file.
<link rel="stylesheet" type="text/css" href="/styles.css">
When file changes are made, the link tag is replaced by appending a timestamp to the end of the href
. This forces the browser to download the file again.
Note that the href
is based on the assetsFileName
option. If using Nollup for example, if your assetsFileName
option is set to [name].[hash][extname]
then href
should be set to /styles.[hash].css
.
FAQs
CSS loader for Rollup with HMR support for Nollup.
We found that rollup-plugin-hot-css demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.