
Security News
PEP 810 Proposes Explicit Lazy Imports for Python 3.15
An opt-in lazy import keyword aims to speed up Python startups, especially CLIs, without the ecosystem-wide risks that sank PEP 690.
transpiled-published-static-application-demo
Advanced tools
An example of publishing source on GitHub but a built application on npm.
This is a test of creating a github repo that contains source files for a static application, which must be run through a build step to generate the immediately usable static version of that app, and then publishing the built static app to npm.
In NPM parlance, this is an example of a "package" that is not a "module:"
Most npm packages are modules, because they are libraries that you load with require. However, there's no requirement that an npm package be a module! Some only contain an executable command-line interface, and don't provide a main field for use in Node programs.
Only source files get committed to the repository, so on GitHub you'll see:
We .gitignore the dist/ output directory and node_modules directory, because we don't want to keep those in the repository.
We nearly do the opposite here: Only build output and a few extra files get published to NPM. Therefore, on an npm install transpiled-published-static-application-demo
you'll only get these in your node_modules/transpiled-published-static-application-demo
directory
If you are hacking on this module and using it, you would see both the src/ and dist/ directories after a clone and build. You could also use npm link
to point your consumer project at your local copy of this project.
FAQs
An example of publishing source on GitHub but a built application on npm.
We found that transpiled-published-static-application-demo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
An opt-in lazy import keyword aims to speed up Python startups, especially CLIs, without the ecosystem-wide risks that sank PEP 690.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.