
Security News
GitHub Actions Pricing Whiplash: Self-Hosted Actions Billing Change Postponed
GitHub postponed a new billing model for self-hosted Actions after developer pushback, but moved forward with hosted runner price cuts on January 1.
webpack-path-resolve
Advanced tools
Install with npm: npm install --save-dev webpack-path-resolve
Install with yarn: yarn add webpack-path-resolve --dev
In a mono-repo, if some of your dependencies are hoisted, use this utility in your webpack.config.js.
//webpack.config.js
const path = require("path");
const webpackPath = require("webpack-path-resolve");
const resolve = webpackPath.resolve(require.resolve.paths);
//If "lodash" is hoisted...
resolve("lodash"); // returns the correct path
path.resolve("./node_modules/lodash"); // returns an incorrect path
If you do not use a monorepo, and if you do not use the yarn workspaces, you do not need this utility.
The Problem
If however, you use a mono-repo with a yarn workspace (or pnpm), then yarn may hoist some of your dependencies to the root. Whether yarn will hoist a dependency such as lodash to the root of the mono-repo depends on whether a different version of that dependency is used by another package within the mono-repo. It is slightly unpredictable.
my-monorepo/
node_modules/
lodash@v1
packages/
package-a/
node_modules/
lodash@v2
package.json
webpack.config.js
package-b/
node_modules/
package.json
webpack.config.js
package.json
lerna.json
yarn.lock
This causes some issues with the webpack.config.js files. It is common practice to use in a webpack.config.js the notation path.resolve("./node_modules/lodash") when configuring a loader or an alias. But this notation will only work if the package is NOT hoisted.
The Solution
//webpack.config.js
import * as path from "path";
import * as webpackPath from "webpack-path-resolve";
const resolve = webpackPath.resolve(require.resolve.paths);
module.exports = {
module: {
rules: [
{
test: /\.js$/,
include: [
//path.resolve("./node_modules/lodash"); // INCORRECT: ./my-monorepo/packages/package-a/node_modules/lodash
resolve("lodash"); // CORRECT: ./my-monorepo/node_modules/lodash
],
use: ["source-map-loader"]
}
],
...
},
...
}
The utility webpack-path-resolve followed the typical nodejs module resolution process. It will scan recursively the following folders to find the dependency.
const resolve = webpackPath.resolve(require.resolve.paths);
resolve("lodash");
// This will scan the following folders for the lodash dependency.
// ./my-monorepo/packages/package-a/node_modules/lodash
// ./my-monorepo/packages/node_modules/lodash
// ./my-monorepo/node_modules/lodash
// ${HOME}/node_modules/lodash
FAQs
A replacement for path.resolve that works with a mono-repo.
The npm package webpack-path-resolve receives a total of 23 weekly downloads. As such, webpack-path-resolve popularity was classified as not popular.
We found that webpack-path-resolve demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub postponed a new billing model for self-hosted Actions after developer pushback, but moved forward with hosted runner price cuts on January 1.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.