
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset.
npm install --save-dev webpack
The README reflects webpack v2.x, webpack v1.x documentation can be found here.
webpack is a bundler for modules. The main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset.
TL;DR
Check out webpack's quick Get Started guide and the other guides.
webpack has a rich plugin interface. Most of the features within webpack itself use this plugin interface. This makes webpack very flexible.
| Name | Status | Description |
|---|---|---|
| common-chunks-webpack-plugin | Generates chunks of common modules shared between entry points and splits them into separate bundles (e.g vendor.bundle.js && app.bundle.js) | |
| extract-text-webpack-plugin | Extracts Text (CSS) from your bundles into a separate file (app.bundle.css) | |
| component-webpack-plugin | Use components with webpack | |
| compression-webpack-plugin | Prepare compressed versions of assets to serve them with Content-Encoding | |
| i18n-webpack-plugin | Adds i18n support to your bundles | |
| html-webpack-plugin | Simplifies creation of HTML files (index.html) to serve your bundles |
webpack enables use of loaders to preprocess files. This allows you to bundle any static resource way beyond JavaScript. You can easily write your own loaders using Node.js.
Loaders are activated by using loadername! prefixes in require() statements,
or are automatically applied via regex from your webpack configuration.
| Name | Status | Description |
|---|---|---|
| raw-loader | Loads raw content of a file (utf-8) | |
| val-loader | Executes code as module and consider exports as JS code | |
| url-loader | Works like the file loader, but can return a Data Url if the file is smaller than a limit | |
| file-loader | Emits the file into the output folder and returns the (relative) url |
| Name | Status | Description |
|---|---|---|
| Loads a JSON file (included by default) | ||
| Loads and transpiles a JSON 5 file | ||
| Loads and transpiles a CSON file |
| Name | Status | Description |
|---|---|---|
<script> | Executes a JavaScript file once in global context (like in script tag), requires are not parsed | |
| Loads ES2015+ code and transpiles to ES5 using Babel | ||
| Loads ES2015+ code and transpiles to ES5 using Traceur | ||
| Loads TypeScript like JavaScript | ||
| Loads CoffeeScript like JavaScript |
| Name | Status | Description |
|---|---|---|
| Exports HTML as string, require references to static resources | ||
| Loads Pug templates and returns a function | ||
| Loads Jade templates and returns a function | ||
| Compiles Markdown to HTML | ||
| Loads and transforms a HTML file using PostHTML | ||
| Compiles Handlebars to HTML |
| Name | Status | Description |
|---|---|---|
<style> | Add exports of a module as style to DOM | |
| Loads CSS file with resolved imports and returns CSS code | ||
| Loads and compiles a LESS file | ||
| Loads and compiles a SASS/SCSS file | ||
| Loads and compiles a Stylus file | ||
| Loads and transforms a CSS/SSS file using PostCSS |
| Name | Status | Description |
|---|---|---|
| Tests with mocha (Browser/NodeJS) | ||
| PreLoader for linting code using ESLint | ||
![]() | PreLoader for linting code using JSHint | |
| PreLoader for code style checking using JSCS |
| Name | Status | Description |
|---|---|---|
| Loads and compiles Vue Components | ||
Process HTML & CSS with preprocessor of choice and require() Web Components like first-class modules | ||
| Loads and compiles Angular 2 Components |
webpack uses async I/O and has multiple caching levels. This makes webpack fast and incredibly fast on incremental compilations.
webpack supports ES2015+, CommonJS and AMD modules out of the box. It performs clever static analysis on the AST of your code. It even has an evaluation engine to evaluate simple expressions. This allows you to support most existing libraries out of the box.
webpack allows you to split your codebase into multiple chunks. Chunks are loaded asynchronously at runtime. This reduces the initial loading time.
webpack can do many optimizations to reduce the output size of your JavaScript by deduplicating frequently used modules, minifying, and giving you full control of what is loaded initially and what is loaded at runtime through code splitting. It can also make your code chunks cache friendly by using hashes.
Most of the time, if webpack is not working correctly for you it is a simple configuration issue.
If you are still having difficulty after looking over your configuration carefully, please post a question to StackOverflow with the webpack tag. Questions that include your webpack.config.js and relevant files are more likely to receive responses.
If you have discovered a bug or have a feature suggestion, feel free to create an issue on Github.
If you create a loader or plugin, please consider open sourcing it, putting it
on npm and following the x-loader, x-webpack-plugin convention.
You are also welcome to correct any spelling mistakes or any language issues.
If you want to discuss something or just need help, here is our Gitter room.
Tobias Koppers Core Founder of webpack |
Johannes Ewald Loaders & Plugins Early adopter of webpack |
Sean T. Larkin Public Relations Founder of the core team |
Juho Vepsäläinen Documentation
Author
|
Kees Kluskens Development Sponsor |
Most of the core team members, webpack contributors and contributors in the ecosystem do this open source work in their free time. If you use webpack for a serious task, and you'd like us to invest more time on it, please donate. This project increases your income/productivity too. It makes development and applications faster and it reduces the required bandwidth.
This is how we use the donations:
We had other sources of donations before starting to use OpenCollective (or people that can't donate via OpenCollective). We want to acknowledge these sponsors and backers, but donations were not public and we are not sure of donors want to stay anonymous. So if you want to be in this list, just send a PR.
Google Angular Team, Architects.io, Microapps
Become a sponsor and get your logo on our README on Github with a link to your site.
Become a backer and get your image on our README on Github with a link to your site.
(In chronological order)
FAQs
Unknown package
We found that webpack1 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.