#webpack

Wilda SoftwareWildaSoftware
2025-10-01

Dla frontendowców nie będzie to nowość, ale od pewnego czasu notuje się duży wzrost popularności . Czym on jest i gdzie wygrywa z wysłużonym - o tym przeczytacie w tym tekście.

blog.logrocket.com/the-silent-

2025-09-29

Reading about (laravel-mix.com/) - it reminds me of , which I dumped because lack of plugins were holding me back and I could do everything with scripts anyway.
But this freedom from complicated config that I don't need/really understand is compelling. I wonder if a move back to something a little comfier is wise? Anyone hit any walls with this approach?

Amadeus Paulussenamadeus@mstdn.social
2025-09-28

@graves501 The projects previously used #gulp, #sass and #webpack.
I chose #npm because I am the only maintainer and really just wanted something super basic.
I am not up to speed, but I regularly run audits and try to fix issues. 🫣 I should read up on it, I guess. 🤔

JAVAPROjavapro
2025-09-24

ist nicht nur für Greenfield-Projekte. Christian Siebmanns führt Sie durch die Implementierung in eine ausgereifte App – mit Infos zu Shared Deps, dynamischem Laden & Version 2.

Lese: javapro.io/de/microfrontends-m

2025-09-21

Me trying to use webpack for the first time to create a bundle of the Monaco Editor:

```
webpack 5.76.1 compiled with 97 errors and 1 warning in 36838 ms
```

Also me, trying to check the size on disk:

```
$ du -csh node_modules/
138M node_modules/
138M total
```

My fellow frontend developers, what have you done?

#webpack #monaco #frontend #npm #javascript

2025-09-20

I solved my JavaScript problem. The solution was to create a module.config.js file where you give a list of package name/local path to use instead of the installed one.

No idea whether it’s a WebPack or a React feature, or even a custom configuration of that particular project.

I still need a watch webpack or babel process in each component repo, in addition to app’s webpack-dev-server, because the latter watches the components’ dist folder. #JavaScript #React #WebPack

tooting.ch/@oscherler/11522692

2025-09-18

I tried `npm install ./relative/path`. I tried several variants of `npm link`. With link I can’t alias the package, and when building it can’t find some dependencies. With relative import it fails with dependencies, won’t see a package that’s clearly there, gives invalid errors in npm list, serve dev won’t refresh when I update the component.

I’m a code warrior. I’ve seen and dealt with some shit. But that’s draining my energy.
#JavaScript #WebPack #React

2025-09-18

JavaScript people: is there an npm equivalent to `pip install -e ../my-package` that actually works? I have a React app (built with WebPack) that I didn’t write that I need to customise. The parts I need to change are in components installed with npm. One is aliased and provides extra SCSS that extends another package. They’re built to a dist folder that makes editing impossible. I need to change the look and the behaviour. >>

#JavaScript #WebPack #React

2025-09-15

Anybody worked out how to use CSP Nonce values with Fastify/helmet and Webpack/Vue? I can't see how to use a dynamically generated nonce with the statically built webpack'd vue

(and yes that word really is troublesome for British English speakers)

#nodeJS #vue #webpack #csp

2025-09-13

🗞️ Exciting update: #webpack now has an official Threat Model!

It sets clear boundaries, improves #security awareness, and strengthens our #ecosystem for everyone. 💪

github.com/webpack/security-wg/pull/9

2025-09-09

today I decided to mess around with #webpack and it had to be the day when the #npm situation happened.

thank goodness tho all the packages were clean by the time I downloaded them, I triple checked

I even checked if there were any weird specific obfuscated code in each package I downloaded and there were none

still gonna go sleep with some paranoia in my brain :(

2025-09-02

🗞️ Exciting news: #webpack now has a Security Working Group!

We’ll:
👉 Define triage & policies
👉 Guide secure plugin development
👉 Improve report processes
👉 Promote best practices
👉 Support #OpenJS & #OpenSSF initiatives

github.com/webpack/security-wg

JAVAPROjavapro
2025-08-11

Microfrontends in ein bestehendes System integrieren – ohne dass Builds, Releases und Abhängigkeiten kollidieren.
Der Artikel zeigt, welche Architektur- und CI-Strategien funktionieren und welche Fehler man nur einmal machen möchte.
javapro.io/de/microfrontends-m

2025-08-05

Electron + microfrontends

Недавно на проекте столкнулся с необычной задачей - сделать из готового React веб-приложения десктопную версию на Electron. Что же тут необычного? А то, что наше веб-приложение построено на микрофронтенд архитектуре и располагается в трёх отдельных репозиториях. А общение между микрофронтендами происходит в runtime через HTTP. И тут начинаются сложности, так как для создания дистрибутива, Electron'у нужен доступ к исходникам всего приложения. Хотя Electron легко подружить с Webpack , как это сделать с плагином Module Federation на первый взгляд не понятно. Поиск готового решения в интернете ничего не дал, кроме повисших в воздухе вопросов на Stack Overflow. Пришлось придумать своё решение, которое я и опишу здесь. Стек проекта типовой (React, Webpack Module Federation, Electron, Electron-forge), поэтому не буду подробно расписывать конфиги, лишь опишу ключевые моменты.

habr.com/ru/articles/934068/

#webpack #electron #module_federation #microfrontends

JAVAPROjavapro
2025-07-28

90% legacy, 10% hope: Christian Siebmanns shares how his team retrofitted Module Federation into an existing app—without breaking everything. Lessons in builds, plugins & CI chaos: javapro.io/2025/07/24/integrat

JAVAPROjavapro
2025-07-24

Tried to plug Module Federation into a running app? Christian Siebmanns shows what really happens when CI breaks, types vanish, & lazy routes fail. Learn how to avoid the same traps: javapro.io/2025/07/24/integrat

Cannot read property 'name' of undefinedzlatko@social.zlatko.dev
2025-07-23

If your npm-related builds are failing...

Someone flagged stylus to be a compromised package, and webpack (sometimes) depends on it.

It's going to be a fun day in many places, I suspect (among others, our pipelines also are dead right now :)).

#npm #webpack #stylus #security #buildFailingLikeAFlakyTest

https://www.npmjs.com/package/stylus
https://github.com/stylus/stylus/issues/2938

JSDev Spacejsdevspace
2025-07-14
Vite vs Webpack: A Guide to Choosing the Right Bundler

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst