
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
vite-bundle-explorer
Advanced tools
A powerful bundle analyzer and visualizer tool for Vite and any other Rollup-compatible bundler.
Analyze your bundle size, detect duplicate dependencies, and visualize module graphs to optimize your application's performance.
vite, rollup, rolldown, and tsdown.Install the package as a development dependency
npm install -D vite-bundle-explorer
# yarn add -D vite-bundle-explorer
# pnpm add -D vite-bundle-explorer
Register the plugin (config name depends on your bundler, here is an example for vite).
import { defineConfig } from 'vite';
import { statsPlugin } from 'vite-bundle-explorer/plugin';
export default defineConfig({
plugins: [
// ...other plugins
statsPlugin(),
],
});
Once your build is complete, you can use CLI or any static file server to see the interactive visualization.
npx vite-bundle-explorer bundle-report
You can pass options to stats plugin
export default defineConfig({
plugins: [
statsPlugin({
// ...options
})
]
});
| Option | Type | Default | Description |
|---|---|---|---|
enabled | boolean | true | Disable stats collection and report generation. This option is disabled automatically for vite dev mode |
reportCompressedSize | boolean | true | Calculate compressed size of chunks. May slightly increase build time. |
reportDirectoryName | string | "bundle-report" | Name of the output directory |
emitHtml | boolean | true | Generate a standalone interactive HTML report |
emitJson | boolean | false | Generate raw stats.json file |
check | boolean | true | Run report checks during the build process |
failOnWarning | boolean | false | Cancel build if bundle has any report warnings |
You can use vite-bundle-explorer to run checks in your CI pipeline.
To fail the build when duplicate dependencies or other warnings are found, set failOnWarning to true:
export default defineConfig({
plugins: [
statsPlugin({
failOnWarning: true,
}),
],
});
FAQs
Bundle analyzer and visualizer tool for Vite
We found that vite-bundle-explorer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.