
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
vite-plugin-rails
Advanced tools
Convention over configuration for Rails projects using Vite
In the future, vite_rails might install this plugin by default.
You can install it manually by running:
npm i vite-plugin-rails # yarn add vite-plugin-rails
Add it to your plugins in vite.config.ts
// vite.config.ts
import Vue from '@vitejs/plugin-vue' // Example, could be using other plugins.
import ViteRails from 'vite-plugin-rails'
export default {
plugins: [
Vue(),
ViteRails(),
],
};
Unlike vite-plugin-ruby, which provides the minimum amount of configuration necessary to get started, this plugin takes a Rails-approach of including plugins you would normally add.
You can configure each plugin by passing options, which are fully typed. See the configuration options for reference.
If you need finer-grained control, you can opt-out and use vite-plugin-ruby instead, manually adding only the plugins you need.
vite-plugin-ruby is added by default.
This plugin uses rollup-plugin-gzip to create gzip and brotli compressed copies of your assets after build.
You can disable each manually:
ViteRails({
compress: { brotli: false }
}),
ViteRails({
compress: false
}),
vite-plugin-environment is used to expose environment variables to your
client code, using the import.meta.env convention from Vite.
This plugin allows you to conveniently provide defaults, or fail on required env variables:
ViteRails({
envVars: {
API_KEY: null,
OPTIONAL_KEY: '<opt-value>',
},
}),
vite-plugin-full-reload comes pre-configured to automatically reload the page
when making changes to server-rendered layouts and templates, improving the
feedback cycle.
You can override the default paths, or pass additional ones:
ViteRails({
fullReload: {
additionalPaths: ['app/serializers/**/*']
},
}),
vite-plugin-stimulus-hmr is included by default,
allowing you to see changes to your Stimulus controllers instantly without refreshing the page.
You can use the stimulus option if you need to configure it.
vite-plugin-manifest-sri is included by default,
calculating a cryptographic hash for JavaScript and CSS assets, so that the browser
can verify the resources it fetches.
You can use the sri option if you need to configure it.
This library is available as open source under the terms of the MIT License.
FAQs
Convention over configuration for using Vite in Rails apps
The npm package vite-plugin-rails receives a total of 65,017 weekly downloads. As such, vite-plugin-rails popularity was classified as popular.
We found that vite-plugin-rails demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.