
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
webpack-runtime-analyzer
Advanced tools
Webpack plugin for analyzing internal processes, state and structure of bundles
Webpack 1.x/2.x plugin for analyzing internal processes, state and structure of bundles. Built on rempl.
npm install webpack-runtime-analyzer --save-dev
var RuntimeAnalyzerPlugin = require('webpack-runtime-analyzer');
// ...
plugins.push(new RuntimeAnalyzerPlugin());
rempl
Also, you can use the GUI to control rempl server.
> wabpack --watch or > webpack-dev-server) then open http://localhost:8177/ in your browser to see UI.Try the example to see how it works:
cd example
npm i
npm run dev
The list of the modules and the assets is always at hand.

Left list contains all modules that included in your bundle.
Right list contains building output (bundles, chunks, static, etc).
Take a look at the dependencies of the modules and at the modules stats.

There are a few basic module types:
require(...)require.context(...)Some modules can be marked as entry. It means that this module is declared in entry-section in you webpack-config.
Module is separated by file types (scripts, templates, styles, etc). Every file type has a different color. You can see these colors at the nodes of graph or at the color-bar above the graph.
You can hover mouse cursor at the nodes of graph or at the color bar sections and see an additional module-info or a file type statistic.
space-keyLook at the file map and find out why your bundle is so big.

Analyzing process is performing in realtime.

In a huge bundles there are many modules that are useless for analyzing.
For example, look at the AST Explorer bundle:

In this case graph is not usable, moreover overloaded graph decreases rendering performance.
You can enable Hide 3rd party modules in the Options menu to hide modules that isn't requiring your project-modules.
So, modules list, graph and file map will be contain only modules that requiring your project-modules.

Hide 3rd party modules is enabled by default.
All features is working correctly with webpack 2.x and 1.x
If you don't want to use default plugin config, then you can specify your own config:
new RuntimeAnalyzerPlugin({
onlyWatchMode: true,
ui: fs.readFileSync('/path/to/ui/bundle.js', 'utf-8'), // packed UI bundle (js + html + css + etc...)
});
Activate plugin only in a watch mode (> webpack --watch or > webpack-dev-server)
If onlyWatchMode is false then the plugin will be activated in a normal (> webpack) and in a watch mode (> webpack --watch or > webpack-dev-server). It means that normal building process will not be terminated after finish because the plugin is holding a permanent connection to the rempl server. The only way to terminate building process is ctrl+c like in a watch mode.
true by default.
The UI built on basis.js framework.
npm run build to build the UI bundle to the dist directoryui plugin optionMIT
FAQs
Webpack plugin for analyzing internal processes, state and structure of bundles
The npm package webpack-runtime-analyzer receives a total of 62 weekly downloads. As such, webpack-runtime-analyzer popularity was classified as not popular.
We found that webpack-runtime-analyzer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.