
Security News
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.
sinamfe-webpack-module_dependency
Advanced tools
webpack 依赖树插件
一、 按照entry的dependencies递归查找 但是找dependencies时被扁平化了 例如 依赖关系: entry -> test-npm-module-react -> react @15.6.2 -> react @16.2.0
找entry的dependencies时,数组顺序 [ test-npm-module-react, react (@15.6.2), react (@16.2.0) ]
加了一层依赖深度的检测
二、 忽略了工程化本身的依赖
例如在entry的dependencies中可以找到两类依赖,除了工程本身的依赖还可以获取是webpack-marauder相关的公有依赖,可以找到promise-polyfill@6.1.0 object-assign@4.1.1。这类忽略掉了
三、 webpack-marauder升级可能会导致依赖树变化,需要对应检查
git add .
git cz
Run the npm version npm version [path|minor|major] command
//发小补丁
npm version patch -m 'commit message'
//发小版本
npm version minor -m 'commit message'
//发小版本
npm version major -m 'commit message'
cnpm publish
Push
git push
FAQs
The npm package sinamfe-webpack-module_dependency receives a total of 13 weekly downloads. As such, sinamfe-webpack-module_dependency popularity was classified as not popular.
We found that sinamfe-webpack-module_dependency demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.

Research
/Security News
Chrome extension CL Suite by @CLMasters neutralizes 2FA for Facebook and Meta Business accounts while exfiltrating Business Manager contact and analytics data.

Security News
After Matplotlib rejected an AI-written PR, the agent fired back with a blog post, igniting debate over AI contributions and maintainer burden.