Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
webpack-plugin-critical-customize-css
Advanced tools
Webpack plugin for the critical CSS inliner library.
This is a webpack wrapper around Addy Osmani's critical library, which helps to inline minimum necessary CSS in HTML documents to prevent stylesheet loading from blocking the Critical Rendering Path.
$ npm install webpack-plugin-critical
The following example shows how the Critical Webpack Plugin can be used to modify
the project's index.html
file to inline only the (minified) CSS needed for the index page,
and asynchronously load the remaining CSS.
webpack.config.js
const CriticalPlugin = require('webpack-plugin-critical').CriticalPlugin;
...
plugins: [
new CriticalPlugin({
src: 'index.html',
inline: true,
minify: true,
dest: 'index.html'
})
]
...
The only required option is dest
and either src
or html
, since without dest, the output would
be lost. When using Critical directly (instead of using this plugin), dest
isn't required because the
callback can accept the HTML or CSS output as a parameter.
Other than dest
, all options are the same as Critical, so please see the
Critical options.
To see a fully working example, check out the integration spec.
When the browser sees this in a page:
<link rel="stylesheet" href="mystyle.css">
The browser stops, loads the stylesheet and its dependencies, and cannot continue
rendering the page until the stylesheet is loaded and parsed.
So the user sees an empty screen while they wait for every stylesheet and script to
load.
The critical library solves this problem by figuring out what CSS is actually needed
for a given page, inlining the CSS into a <style>
tag, and asynchronously loading the remaining CSS.
<style>
.home-heading { font-size: 20pt; }
</style>
<link rel="preload" href="mystyle.css" onload="this.rel='stylesheet'">
By loading the stylesheet using preload
instead of stylesheet
, the browser
can begin downloading the stylesheet in the background, which comes in handy
in single page applications where additional views may be loaded that depend
on rules from the full stylesheet.
This plugin is written in TypeScript and includes TypeScript typings, which should automatically work if using TypeScript 2.x+.
FAQs
Webpack plugin for the critical CSS inliner library.
The npm package webpack-plugin-critical-customize-css receives a total of 1 weekly downloads. As such, webpack-plugin-critical-customize-css popularity was classified as not popular.
We found that webpack-plugin-critical-customize-css demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.