
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
wepack4-react-project-template
Advanced tools
webpack4-react-redux boilerplate Migrating to webpack4 sass3 babel7 react16 react-router3 Redux
webpack 一直以来最饱受诟病的就是其配置门槛极高,配置内容极其复杂和繁琐,容易让人从入门到放弃,而它的后起之秀如 rollup、parcel 等均在配置流程上做了极大的优化,做到开箱即用,所以webpack 4 也从中借鉴了不少经验来提升自身的配置效率。愿世间再也不需要 webpack 配置工程师。
但是,webpack4还是需要n多优化部分,配置下来,实为不易。而实际开发也不需要浪费这个时间——了解即可 其实,https://github.com/react-boilerplate 够好了 但是还是觉得自己定制的更加亲切~^~,第二个,也分享下经验。
启动:
npm run start
打包:
npm run build
遵从平台发布前端规范标准,节选以下要点:
遵从Camel命名
mkdir yourFileName
cd yourFileName
根据工程目录结构,构建相关文件 ……
npm init
npm install webpack webpack-cli --save-dev
development很明显就是我们开发所需要的依赖包,而打包好上线的话是不需要这些包的,一来各种包加起来太大,二来它只是我们开发提高效率的工具而已; 由于本工程只在本地跑,最终还是sftp自动dist 到服务器,所以暂略
修改package.json ,npm run dev 检查打包结果
{
"scripts": {
"dev": "webpack --mode development",
"build": "webpack --mode production"
}
}
参考http://www.ruanyifeng.com/blog/2016/10/npm_scripts.html +如果是并行执行(即同时的平行执行),可以使用&符号。 +如果是继发执行(即只有前一个任务成功,才执行下一个任务),可以使用&&符号。 npm run script1.js & npm run script2.js npm run script1.js && npm run script2.js
npm install css-loader style-loader html-loader url-loader file-loader --save-dev
[
{
test: /\.html$/,
use: 'html-loader'
},
{
test: /\.css$/,
use: [
{
loader: 'style-loader',
options:{
// singleton:true //处理为单个style标签
}
},
{
loader: 'css-loader',
options:{
// minimize:true //压缩css
}
}
]
},
{
test:/\.(png|jpg|jpeg|gif)$/,//图片处理
use:[
{
loader: 'url-loader',
options:{
limit:2048,
name:'[name][hash].[ext]'
}
},
{
loader: 'file-loader',
publicPath:publicPath,
outputPath: 'dist/',
useRelativePath: true
}
]
},
{
test: /\.(woff|woff2|eot|ttf|otf)$/,//字体处理
use: ['url-loader']
},
]
npm install --save-dev babel-loader @babel/core @babel/preset-env
npm install --save-dev eslint-loader
[
{
test: /\.js$/,
loader: 'babel-loader',
exclude: /node_modules/ //设置node_modules里的js文件不用解析
}
]
参考:https://segmentfault.com/a/1190000010468759
babel7.0后,需要@ @babel/core vs babel-core babel插件和版本需要对应上,不然掉坑 参考https://www.w3ctech.com/topic/2150 babel-preset-es2015 babel-plugin-transform-runtime babel-plugin-add-module-exports babel-plugin-transform-runtime babel-plugin-transform-class-properties
{
"presets": ["@babel/preset-env","@babel/preset-react"]
}
npm install --save-dev eslint eslint-loader babel-eslint eslint-plugin-react
[
{//eslint 检查
test: /\.(js|jsx)$/,
enforce: 'pre',
loader: ['eslint-loader'],
exclude: /node_modules/ //设置node_modules里的js文件不用解析
},
]
增加.eslintrc配置
具体查看 https://www.zhoulujun.cn/html/tools/grunt/2016_0519_7832.html
npm install html-webpack-plugin
new HtmlWebpackPlugin({
filename: './index.html',//输出文件
template: 'src/index.html',//模板文件
inject: 'body',//插入位置
chunks: ['index'],
hash: true,
minify: {
caseSensitive:false,
removeComment:true,//移除注释
collapseWhitespace:false//移除多余空格
}
})
参考:http://shirmy.me/2018/05/15/webpack-图片、文件处理/
npm install image-webpack-loader --save-dev
[
{
test: /\.(png|jpg|jpeg|gif)$/i,//图片处理
use: [
{
loader: 'url-loader',
options: {
limit: 0,//图片不转base64,增加css的阻塞时间,开启http2,所以也不用雪碧图
name: '[name].[hash:5].[ext]',
}
},
]
},
{//压缩图片
loader: 'image-webpack-loader',
options: {
bypassOnDebug: true,
}
},
]
npm install webpack-dev-server open --save-dev
参看 webpack.server.js 注释
{
"start": "node webpack.server.js"
}
npm start 启动项目
npm install --save-dev postcss-loader autoprefixer postcss autoprefixer mini-css-extract-plugin
module.exports = {
plugins: {
'autoprefixer': {
browsers: [
"> 1%",
"last 5 versions",
"not ie <= 9",
"ios >= 8",
"android >= 4.0"
]
}
}
};
不然会报出:Error: No PostCSS Config found
npm install --save-dev optimize-css-assets-webpack-plugin
npm install --save-dev node-sass sass-loader
npm install --save-dev happypack
配置第三方包,比如jquery
npm install imports-loader --save-dev
[
{
loader: 'imports-loader',
options: {
// 模块为 value,同样webpack也会解析它,如果没有则从alias中解析它
$: 'jquery'
}
}
]
npm install --save-dev webpack-subresource-integrity webpack-assets-manifest
两个插件准备写成一个,看来不到春节没有时间
配置参看 webpack.analy 参考文章:https://www.cnblogs.com/ssh-007/p/7944491.html
npm install --save-dev webpack-bundle-analyzer
npm install --save-dev webpack-parallel-uglify-plugin optimize-css-assets-webpack-plugin cssnano
const UglifyJsPlugin=require('webpack-parallel-uglify-plugin');
const OptimizeCSSAssetsPlugin = require('optimize-css-assets-webpack-plugin');
const cssnano = require('cssnano');
config.optimization = {
minimizer:[
new UglifyJsPlugin({
cache: true, // node_modules/.cache/uglifyjs-webpack-plugin
parallel: os.cpus().length, // 并行 default:true os.cpus().length - 1
uglifyOptions: {
ecma: 5,
mangle: true,
},
sourceMap: false,
}),
new OptimizeCSSAssetsPlugin({
assetNameRegExp: /\.css$/g,
cssProcessor: cssnano, // 默认使用 cssnano 处理 css
cssProcessorOptions: {
reduceIdents: false, // 禁止将 keyframes 自动更名
mergeIdents: false, // 禁止自动合并 keyframes
discardUnused: false, // 禁止移除掉未使用的 keyframes
autoprefixer: false, // 禁止默认删除掉一些前缀,以减少兼容性的问题
zindex: false, // 禁止自动转换 z-index
map: false,
},
}),
],
...
}
参考:https://jdc.jd.com/archives/212580
Webpack v4 以前使用内置的 webpack.optimize.UglifyJsPlugin 插件,在 Webpack 4 以后,开始使用 ^1.0.0 独立的版本。
npm install --save-dev webpack-sftp-client
new WebpackSftpClient({
port: '20020',
host: '10.111.111.38',
username: 'nginx',
password: 'zlj@123',
path: './dist/',//本地上传目录
remotePath: '/usr/local/nginx/html/demo',//服务器目标目录
verbose: true
})
npm install --save-dev react react-dom @babel/preset-react babel-preset-react eslint-plugin-react
npm install --save-dev react-router@3.2.1 history redux react-redux redux-thunk
react-router v4 官方教程 第一个是:react-router-dom,配置方面的 第二是code-splitting:https://reacttraining.com/react-router/web/guides/code-splitting React-router4简约教程 https://www.jianshu.com/p/bf6b45ce5bcc react-router@2.8.1 2.x 不兼容
推荐 react-router@3.2.1
npm install --save-dev react-router-dom history redux react-redux redux-thunk react-router-redux
npm install --save-dev react-loading react-hot-loader
npm install --save-dev es6-promise isomorphic-fetch immutable
Karma文档 http://karma-runner.github.io/3.0/config/configuration-file.html
推荐阅读:https://www.jianshu.com/p/6726c0410650
npm install --save-dev karma karma-coverage karma-mocha karma-mocha-reporter karma-phantomjs-launcher karma-sourcemap-loader karma-webpack
npm install --save-dev karma-jasmine jasmine-core
npm install --save-dev chai isparta-instrumenter-loader mocha phantomjs-prebuilt react-addons-test-utils
npm install --save-dev glob minimatch
node的glob模块允许你使用 *等符号, 来写一个glob规则,像在shell里一样,获取匹配对应规则的文件. 这个glob工具基于javascript.它使用了 minimatch 库来进行匹配 https://www.cnblogs.com/xinxingyu/p/5736244.html
react-composition //中文输入问题
webpack 相关优化,可参看:https://www.zhoulujun.cn/html/tools/webpack/2016_0218_7492.html
#npm 包简要说明————待优化
{
"devDependencies": {
"@babel/core": "^7.2.2",
"@babel/preset-env": "^7.2.3",
"@babel/preset-react": "^7.0.0",
"autoprefixer": "^9.4.4",//css不全兼容代码
"babel-eslint": "^10.0.1",
"babel-loader": "^8.0.4",
"chai": "^4.2.0",//断言库
"css-loader": "^2.1.0",
"es6-promise": "^4.2.5",
"eslint": "^5.12.0",
"eslint-loader": "^2.1.1",
"eslint-plugin-react": "^7.12.3",
"eslint-plugin-vue": "^5.1.0",
"file-loader": "^3.0.1",
"glob": "^7.1.3",
"happypack": "^5.0.1",//多线程 处理 *-loader
"history": "^3.2.1", //router history 处理
"html-loader": "^0.5.5",
"html-webpack-plugin": "^3.2.0",//入口 html 合成
"image-webpack-loader": "^4.6.0",//图片压缩
"immutable": "^4.0.0-rc.12",
"isomorphic-fetch": "^2.2.1",
"isparta-instrumenter-loader": "^1.0.1",
"jasmine": "^3.3.1",//BDD, framework independent, 测试框架 || https://en.wikipedia.org/wiki/List_of_unit_testing_frameworks#JavaScript
"jasmine-core": "^3.3.0",
"karma": "^3.1.4",//测试管理工具 ||Selenium、WebDriver/Selenium 2、Mocha[1]、JsTestDriver、HTML Runners和Karma,我这里选择使用Karma
"karma-coverage": "^1.1.2",//测试覆盖报告
"karma-jasmine": "^2.0.1",
"karma-mocha": "^1.3.0",
"karma-mocha-reporter": "^2.2.5",
"karma-phantomjs-launcher": "^1.0.4",
"karma-sourcemap-loader": "^0.3.7",
"karma-webpack": "^3.0.5",
"mini-css-extract-plugin": "^0.5.0",
"minimatch": "^3.0.4",
"mocha": "^5.2.0",//测试框架 || https://en.wikipedia.org/wiki/List_of_unit_testing_frameworks#JavaScript
"node-sass": "^4.11.0",
"open": "0.0.5",//打开浏览器 chrome-launch
"phantomjs-prebuilt": "^2.1.16",
"postcss": "^7.0.7",
"postcss-loader": "^3.0.0",
"react": "^16.7.0",
"react-addons-test-utils": "^15.6.2",//react官方的测试插件
"react-dom": "^16.7.0",
"react-hot-loader": "^4.6.3",
"react-loading": "^2.0.3",//loading 动画
"react-redux": "^6.0.0",
"react-router": "^3.2.1",//待升级4.x
"redux": "^4.0.1",
"redux-thunk": "^2.3.0",//异步套件 ||http://www.ruanyifeng.com/blog/2016/09/redux_tutorial_part_two_async_operations.html
"sass-loader": "^7.1.0",
"style-loader": "^0.23.1",
"url-loader": "^1.1.2",//处理url 文件打包
"webpack": "^4.28.3",
"webpack-assets-manifest": "^3.1.1",
"webpack-bundle-analyzer": "^3.0.3",
"webpack-cli": "^3.2.0",
"webpack-dev-server": "^3.1.14",
"webpack-manifest-plugin": "^2.0.4",//生成manifest
"webpack-sftp-client": "^1.2.1",//上传服务器
"webpack-subresource-integrity": "^1.3.1"//生成html5 integrity
}
}
后记:从grunt glup webpack1.x -3.x ,每次搭建都耗费一番功夫。但是webpack4 跟 react redux router 里面 各个版本不兼容的坑蛮多。比如用用之前最顺手的项目环境 套webpack4,搞错是一丢丢, 干脆重新从0开始搭建,估计半年后,又忘记了!——我始终觉得这个东西,没有必要太在上面嗑。对里面稍微了解就好。
FAQs
webpack4 react sass标准模板工程
The npm package wepack4-react-project-template receives a total of 0 weekly downloads. As such, wepack4-react-project-template popularity was classified as not popular.
We found that wepack4-react-project-template demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.