
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
webpack-incremental-deploy-plugin
Advanced tools
一个用于 Webpack 的增量部署插件,可以在生产环境构建时过滤未变更的文件,实现增量部署,减少部署包大小和部署时间。
npm install webpack-incremental-deploy-plugin
const IncrementalDeployPlugin = require('webpack-incremental-deploy-plugin');
module.exports = {
plugins: [
new IncrementalDeployPlugin({
appName: 'your-app-name',
baseUrl: 'https://your-domain.com',
debug: true,
generateFileList: true,
})
]
};
// rsbuild.config.ts
import IncrementalDeployPlugin from 'webpack-incremental-deploy-plugin';
export default {
tools: {
rspack: {
plugins: [
new IncrementalDeployPlugin({
appName: 'your-app-name',
baseUrl: 'https://your-domain.com',
debug: true,
})
],
},
},
};
| 选项 | 类型 | 默认值 | 描述 |
|---|---|---|---|
appName | string | '' | 应用名称,会自动拼接为完整的基准文件URL |
baseUrl | string | '' | 基准文件基础URL |
fileListName | string | 'file_list.txt' | 文件清单文件名 |
extensions | string[] | ['.js', '.css', '.png'] | 要过滤的文件扩展名 |
allowedDirectories | string[] | ['dist/img', 'dist/css', 'dist/js', 'dist/fonts'] | 允许过滤的目录列表 |
outputPrefix | string | 'dist/' | 输出目录前缀 |
generateFileList | boolean | true | 是否生成文件清单 |
debug | boolean | false | 是否启用调试日志 |
timeout | number | 3000 | 网络请求超时时间(毫秒) |
基准文件 URL 的生成规则为:
${baseUrl}/${appName}/${fileListName}
例如:
https://your-domain.com/your-app-name/file_list.txt
timeout 选项配置MIT
欢迎提交 Issue 和 Pull Request!
FAQs
Webpack 增量部署插件,用于在生产环境构建时过滤未变更的文件,实现增量部署
We found that webpack-incremental-deploy-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.