Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
rollup-plugin-uglify
Advanced tools
Rollup plugin to minify generated bundle.
npm i rollup-plugin-uglify -D
import { rollup } from 'rollup';
import uglify from 'rollup-plugin-uglify';
rollup({
entry: 'main.js',
plugins: [
uglify()
]
});
uglify(options, minifier)
options
– default: {}
, type: object
. UglifyJS API options
minifier
– default: require('uglify-js').minify
, type: function
. Module to use as a minifier. You can use other versions (or forks) of UglifyJS instead default one.
UglifyJS, which this plugin is based on, does not support the ES2015 module syntax. Thus using this plugin with Rollup's default bundle format ('es'
) will not work and error out.
To work around this you can tell rollup-plugin-uglify
to use the UglifyJS unstable es version by passing its minify
function to minify your code.
import { rollup } from 'rollup';
import uglify from 'rollup-plugin-uglify';
import { minify } from 'uglify-es';
rollup({
entry: 'main.js',
plugins: [
uglify({}, minify)
]
});
To install the experimental version of UglifyJS:
npm i uglify-es -D
If you'd like to preserve comments (for licensing for example), then you can specify a function to do this like so:
uglify({
output: {
comments: function(node, comment) {
var text = comment.value;
var type = comment.type;
if (type == "comment2") {
// multiline comment
return /@preserve|@license|@cc_on/i.test(text);
}
}
}
});
See UglifyJS documentation for further reference.
MIT © Bogdan Chadkin
FAQs
Rollup plugin to minify generated bundle
The npm package rollup-plugin-uglify receives a total of 55,066 weekly downloads. As such, rollup-plugin-uglify popularity was classified as popular.
We found that rollup-plugin-uglify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.