Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Watchify is a browserify plugin that enables fast incremental bundling. It watches your files and updates the bundle whenever any of the source files change, making it ideal for development environments where quick feedback is essential.
Incremental Bundling
This feature allows you to set up a watch on your files so that any changes trigger a rebundling process. The code sample demonstrates how to use watchify with browserify to watch for changes in 'main.js' and update 'bundle.js' accordingly.
const watchify = require('watchify');
const browserify = require('browserify');
const fs = require('fs');
const b = browserify({
entries: ['main.js'],
cache: {},
packageCache: {},
plugin: [watchify]
});
b.on('update', bundle);
bundle();
function bundle() {
b.bundle().pipe(fs.createWriteStream('bundle.js'));
}
Custom Watch Options
Watchify allows you to customize the watch options, such as setting a delay before rebundling. The code sample shows how to set a custom delay of 1000 milliseconds before the rebundling process starts.
const watchify = require('watchify');
const browserify = require('browserify');
const fs = require('fs');
const customOpts = {
entries: ['main.js'],
cache: {},
packageCache: {},
plugin: [watchify],
delay: 1000 // Custom delay before rebundling
};
const b = browserify(customOpts);
b.on('update', bundle);
bundle();
function bundle() {
b.bundle().pipe(fs.createWriteStream('bundle.js'));
}
Gulp-watch is a file watcher specifically designed for use with Gulp. It allows you to watch files and run Gulp tasks when changes are detected. Unlike watchify, which is tightly integrated with browserify, gulp-watch is more general-purpose and can be used with any Gulp task.
Chokidar is a highly efficient file watcher that can be used to watch files and directories for changes. It is more flexible than watchify as it is not tied to any specific bundler and can be used in a variety of scenarios. However, it requires more setup to achieve the same functionality as watchify when used with browserify.
Webpack is a powerful module bundler that includes built-in file watching capabilities. It can be configured to watch files and recompile the bundle when changes are detected. While it offers more features and flexibility compared to watchify, it also comes with a steeper learning curve.
watch mode for browserify builds
Update any source file and your browserify bundle will be recompiled on the spot.
$ watchify main.js -o static/bundle.js
Now as you update files, static/bundle.js
will be automatically incrementally rebuilt on
the fly.
The -o
option can be a file or a shell command (not available on Windows)
that receives piped input:
watchify main.js -o 'exorcist static/bundle.js.map > static/bundle.js' -d
watchify main.js -o 'uglifyjs -cm > static/bundle.min.js'
You can use -v
to get more verbose output to show when a file was written and how long the bundling took (in seconds):
$ watchify browser.js -d -o static/bundle.js -v
610598 bytes written to static/bundle.js (0.23 seconds)
610606 bytes written to static/bundle.js (0.10 seconds)
610597 bytes written to static/bundle.js (0.14 seconds)
610606 bytes written to static/bundle.js (0.08 seconds)
610597 bytes written to static/bundle.js (0.08 seconds)
610597 bytes written to static/bundle.js (0.19 seconds)
Use watchify
with all the same options as browserify
except that -o
(or
--outfile
) is mandatory. Additionally, there are also:
Standard Options:
--outfile=FILE, -o FILE
This option is required. Write the browserify bundle to this file. If
the file contains the operators `|` or `>`, it will be treated as a
shell command, and the output will be piped to it (not available on
Windows).
--verbose, -v [default: false]
Show when a file was written and how long the bundling took (in
seconds).
Advanced Options:
--delay [default: 600]
Amount of time in milliseconds to wait before emitting an "update"
event after a change.
--ignore-watch=GLOB, --iw GLOB [default: false]
Ignore monitoring files for changes that match the pattern. Omitting
the pattern will default to "**/node_modules/**".
--poll=INTERVAL [default: false]
Use polling to monitor for changes. Omitting the interval will default
to 100ms. This option is useful if you're watching an NFS volume.
var watchify = require('watchify');
var fromArgs = require('watchify/bin/args');
Wrap a browserify bundle b
with watchify, returning the wrapped bundle
instance as w
.
When creating the browserify instance b
you MUST set these properties in the
constructor:
var b = browserify({ cache: {}, packageCache: {} });
var w = watchify(b);
You can also just do:
var b = browserify(watchify.args);
var w = watchify(b);
w
is exactly like a browserify bundle except that caches file contents and
emits an 'update'
event when a file changes. You should call w.bundle()
after the 'update'
event fires to generate a new bundle. Calling w.bundle()
extra times past the first time will be much faster due to caching.
opts.delay
is the amount of time in milliseconds to wait before emitting
an "update" event after a change. Defaults to 600
.
opts.ignoreWatch
ignores monitoring files for changes. If set to true
,
then **/node_modules/**
will be ignored. For other possible values see
Chokidar's documentation on "ignored".
opts.poll
enables polling to monitor for changes. If set to true
, then
a polling interval of 100ms is used. If set to a number, then that amount of
milliseconds will be the polling interval. For more info see Chokidar's
documentation on
"usePolling" and "interval".
This option is useful if you're watching an NFS volume.
Close all the open watch handles.
Create a watchify instance w
from an array of arguments args
. The required
constructor parameters will be set up automatically.
When the bundle changes, emit the array of bundle ids
that changed.
When a bundle is generated, this event fires with the number of bytes.
When a bundle is generated, this event fires with the time it took to create the bundle in milliseconds.
This event fires to with messages of the form:
X bytes written (Y seconds)
with the number of bytes in the bundle X and the time in seconds Y.
With npm do:
$ npm install -g watchify
to get the watchify command and:
$ npm install watchify
to get just the library.
MIT
FAQs
watch mode for browserify builds
We found that watchify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 41 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.