
Product
Rust Support in Socket Is Now Generally Available
Socket’s Rust and Cargo support is now generally available, providing dependency analysis and supply chain visibility for Rust projects.
sinamfe-webpack-module_dependency
Advanced tools
webpack 依赖树插件
一、 按照entry的dependencies递归查找 但是找dependencies时被扁平化了 例如 依赖关系: entry -> test-npm-module-react -> react @15.6.2 -> react @16.2.0
找entry的dependencies时,数组顺序 [ test-npm-module-react, react (@15.6.2), react (@16.2.0) ]
加了一层依赖深度的检测
二、 忽略了工程化本身的依赖
例如在entry的dependencies中可以找到两类依赖,除了工程本身的依赖还可以获取是webpack-marauder相关的公有依赖,可以找到promise-polyfill@6.1.0 object-assign@4.1.1。这类忽略掉了
三、 webpack-marauder升级可能会导致依赖树变化,需要对应检查
git add .
git cz
Run the npm version npm version [path|minor|major] command
//发小补丁
npm version patch -m 'commit message'
//发小版本
npm version minor -m 'commit message'
//发小版本
npm version major -m 'commit message'
cnpm publish
Push
git push
FAQs
We found that sinamfe-webpack-module_dependency demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket’s Rust and Cargo support is now generally available, providing dependency analysis and supply chain visibility for Rust projects.

Security News
Chrome 144 introduces the Temporal API, a modern approach to date and time handling designed to fix long-standing issues with JavaScript’s Date object.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.