
Product
Introducing Scala and Kotlin Support in Socket
Socket now supports Scala and Kotlin, bringing AI-powered threat detection to JVM projects with easy manifest generation and fast, accurate scans.
snowpack-plugin-hash
Advanced tools
Snowpack integration for @typed/content-hash to apply content hashes to all of your build assets. This can be helpful in production to allow caching files permanently since the hashes are determinstic based on the contents of the file.
Note that this plugin uses Snowpack's "optimize" plugin API which will only run during snowpack build
to prepare your assets for production.
import-map.json
to reference hashesnpm i --save-dev snowpack-plugin-hash
yarn add -d snowpack-plugin-hash
So far in my experience it has been best to keep this plugin last to ensure the asset manifest is correct.
// snowpack.config.js
module.exports = {
...config,
plugins: [
[
'snowpack-plugin-hash',
// Entirely optional object. Showing default values
{
// Name of custom tsconfig to use for compiler options passed to TypeScript compiler
readonly tsConfig?: undefined
// Configured length of your hashes
readonly hashLength?: number
// Name of file for asset manifest JSON
readonly assetManifest?: string
// BaseURL to use to rewrite files being hashed
readonly baseUrl?: string
// Configure log level of plugin, 'error' | 'info' | 'debug'
readonly logLevel?: 'info'
// If the build succeeds, a file at this path will produce a JSON representing the AST generated
readonly registryFile?: undefined
// Defaults the your buildOptions config, but can be used to override.
readonly sourceMaps?: boolean
}
]
]
}
FAQs
Content-hash for Snowpack
We found that snowpack-plugin-hash demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports Scala and Kotlin, bringing AI-powered threat detection to JVM projects with easy manifest generation and fast, accurate scans.
Application Security
/Security News
Socket CEO Feross Aboukhadijeh and a16z partner Joel de la Garza discuss vibe coding, AI-driven software development, and how the rise of LLMs, despite their risks, still points toward a more secure and innovative future.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.