
Security News
Meet Socket at Black Hat and DEF CON 2025 in Las Vegas
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
webpack-path-resolve
Advanced tools
Install with npm: npm install --save-dev webpack-path-resolve
Install with yarn: yarn add webpack-path-resolve --dev
In a mono-repo, if some of your dependencies are hoisted, use this utility in your webpack.config.js
.
//webpack.config.js
const path = require("path");
const webpackPath = require("webpack-path-resolve");
const resolve = webpackPath.resolve(require.resolve.paths);
//If "lodash" is hoisted...
resolve("lodash"); // returns the correct path
path.resolve("./node_modules/lodash"); // returns an incorrect path
If you do not use a monorepo, and if you do not use the yarn workspaces, you do not need this utility.
The Problem
If however, you use a mono-repo with a yarn workspace (or pnpm
), then yarn may hoist some of your dependencies to the root. Whether yarn will hoist a dependency such as lodash
to the root of the mono-repo depends on whether a different version of that dependency is used by another package within the mono-repo. It is slightly unpredictable.
my-monorepo/
node_modules/
lodash@v1
packages/
package-a/
node_modules/
lodash@v2
package.json
webpack.config.js
package-b/
node_modules/
package.json
webpack.config.js
package.json
lerna.json
yarn.lock
This causes some issues with the webpack.config.js
files. It is common practice to use in a webpack.config.js
the notation path.resolve("./node_modules/lodash")
when configuring a loader or an alias. But this notation will only work if the package is NOT hoisted.
The Solution
//webpack.config.js
import * as path from "path";
import * as webpackPath from "webpack-path-resolve";
const resolve = webpackPath.resolve(require.resolve.paths);
module.exports = {
module: {
rules: [
{
test: /\.js$/,
include: [
//path.resolve("./node_modules/lodash"); // INCORRECT: ./my-monorepo/packages/package-a/node_modules/lodash
resolve("lodash"); // CORRECT: ./my-monorepo/node_modules/lodash
],
use: ["source-map-loader"]
}
],
...
},
...
}
The utility webpack-path-resolve
followed the typical nodejs module resolution process. It will scan recursively the following folders to find the dependency.
const resolve = webpackPath.resolve(require.resolve.paths);
resolve("lodash");
// This will scan the following folders for the lodash dependency.
// ./my-monorepo/packages/package-a/node_modules/lodash
// ./my-monorepo/packages/node_modules/lodash
// ./my-monorepo/node_modules/lodash
// ${HOME}/node_modules/lodash
FAQs
A replacement for path.resolve that works with a mono-repo.
The npm package webpack-path-resolve receives a total of 14 weekly downloads. As such, webpack-path-resolve popularity was classified as not popular.
We found that webpack-path-resolve demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.
Security News
Deno 2.4 brings back bundling, improves dependency updates and telemetry, and makes the runtime more practical for real-world JavaScript projects.