
Security News
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
Use webpack in a more programmatic way.
Create a wbpk.js file in your root directory.
// wbpk.js
var wbpk = require('wbpk').default;
var instance = new wbpk();
instance
.entry(__dirname + '/src/app.js')
.output(__dirname + '/dist/bundle.js')
.loaders([
{
test: /\.js$/,
loader: 'babel-loader'
}
])
.run(); // can also use .watch()
Then run wbpk to build / watch.
.config(config: object|string)Load a pre-exisitng webpack config. Can be an object or a path to a webpack.config.js.
.entry(path: string|array)Your entry point. Can be a string or an array of file paths. All files must be absolute (append __dirname).
.output(path: string)Your files destination. Pass the whole filepath to where you want your build to go, including the filename and extension.
.loaders(loaders: object[])What loaders to use. Right now these should be the same as you would pass to your webpack config. Know of a way to make this more user-friendly? Submit an issue or pull request.
.run()Executes webpack to build based off of your config.
.watch(opts: object)Tells webpack to watch for changes based on your config. All valid webpack watch config options can be passed here.
FAQs
Programmatic interface to webpack similar to Gulp
We found that wbpk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.