Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
JS minifier for Lektor that automatically minifies javascript files
Uses rjsmin and looks for .js files, minifying them as part of the build process. It only rebuilds when it's needed (file changed or the config changed). When starting the the development server it watchs the files for changes in the background and rebuilds them when needed.
You can install the plugin with Lektor's installer::
lektor plugins add lektor-jsminify
Or by hand, adding the plugin to the packages section in your lektorproject file::
[packages]
lektor-jsminify = 1.4.1
To enable jsminify, pass the jsminify
flag when starting the development
server or when running a build:
lektor server -f jsminify
lektor build -f jsminify
When the flag is present, jsminify will take all .js files from asset_sources/js, minifies them and places them in assets/js.
The Plugin has the following settings you can adjust to your needs:
parameter | default value | description |
---|---|---|
source_dir | asset_sources/js/ | the directory in which the plugin searchs for js files (subdirectories are included) |
output_dir | assets/js/ | the directory the minified js files get place at |
name_prefix | prefix for output name e.g. test.js becomes to test<name_prefix>.js | |
keep_bang_comments | False | keep comments starting with an exclamation mark |
excluded_assets | exclude .js files using a comma separated list of unix shell style wildcards (fnmatch) | |
included_assets | include .js files using a comma separated list of unix shell style wildcards (fnmatch) overrides excluded assets |
An example config can be found at configs/jscompile.ini
FAQs
JS minifier for Lektor. Based on rjsmin.
We found that lektor-jsminify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.