
Research
/Security News
Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.
Compile multiple TypeScript projects into multiple targets.
tsc-multi can compile your TypeScript projects into multiple modules (e.g. CommonJS, ESM) or targets (e.g. ES6, ES2018) in parallel.
tsc-multi supports project references, which are very useful for monorepo. It works just like tsc --build. File watching is also supported.
tsc-multi rewrites all import paths in output files to maximize the compatibility across different platforms such as Node.js, web browser and Deno, because import paths are more strict in ESM.
Example:
// Input
import dir from "./dir";
import file from "./file";
// Output
import dir from "./dir/index.js";
import file from "./file.js";
npm install tsc-multi --save-dev
Create a tsc-multi.json in the folder.
{
"targets": [
{ "extname": ".cjs", "module": "commonjs" },
{ "extname": ".mjs", "module": "esnext" }
],
"projects": ["packages/*/tsconfig.json"]
}
Build TypeScript files.
tsc-multi
Watch changes and rebuild TypeScript files.
tsc-multi --watch
Delete built files.
tsc-multi --clean
targetsBuild targets. All options except extname will override compilerOptions in tsconfig.json.
{
// Rename the extension of output files
extname: ".js",
// Compiler options
module: "esnext",
target: "es2018",
}
projectsPath to TypeScript projects. It can be either a folder which contains tsconfig.json, or the path to tsconfig.json. This option can be set in either config file or CLI.
[
// CWD
".",
// Folder
"pkg-a",
// tsconfig.json path
"tsconfig.custom.json",
// Glob
"packages/*/tsconfig.json",
];
compilerSpecify a custom TypeScript compiler (e.g. ttypescript).
--watchWatch input files and rebuild when they are changed.
--cleanDelete built files. Only available when compilerOptions.rootDir is specified in tsconfig.json.
--verbosePrint debug logs.
--cwdSpecify the current working directory (CWD).
--configSpecify the path of the config file. The path can be either a relative path or an absolute path. Default to $CWD/tsc-multi.json.
--compilerSpecify a custom TypeScript compiler.
MIT
FAQs
Compile multiple TypeScript projects into multiple targets.
The npm package tsc-multi receives a total of 13,358 weekly downloads. As such, tsc-multi popularity was classified as popular.
We found that tsc-multi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.

Research
/Security News
We identified over 20 additional malicious extensions, along with over 20 related sleeper extensions, some of which have already been weaponized.