npmpackage.info

Gathering detailed insights and metrics for @crgwbr/webpack-bundle-tracker

@crgwbr/webpack-bundle-tracker - 0.5.0-b1 | npmpackage.info

@crgwbr/webpack-bundle-tracker

Spits out some stats about webpack compilation process to a file

0.5.0-b1

MIT

JavaScript

128.51 kB

1.7

Installations

npm install @crgwbr/webpack-bundle-tracker

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

11.9.0

NPM Version

6.5.0 Score

Supply Chain

96.8

Quality

74.9

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

0

Closed

0

Issues

Open

0

Total

0

Closed

0

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

crgwbr

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

58 Commits

2 Watchers

4 Branches

1 Contributors

Updated on Mar 07, 2021

Maintainers

View All 1 Contributors

Package Meta Information

Latest Version

0.5.0-b1

Package Id

@crgwbr/webpack-bundle-tracker@0.5.0-b1

Unpacked Size

128.51 kB

Size

49.60 kB

File Count

NPM Version

6.5.0

Node Version

11.9.0

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

deep-extend mkdirp strip-ansi

webpack-bundle-tracker

Spits out some stats about webpack compilation process to a file.

Install

1npm install --save-dev webpack-bundle-tracker

Usage

1var BundleTracker  = require('webpack-bundle-tracker');
2module.exports = {
3    context: __dirname,
4    entry: {
5      app: ['./app']
6    },
7
8    output: {
9        path: require("path").resolve('./assets/bundles/'),
10        filename: "[name]-[hash].js",
11        publicPath: 'http://localhost:3000/assets/bundles/',
12    },
13
14    plugins: [
15      new BundleTracker({path: __dirname, filename: './assets/webpack-stats.json'})
16    ]
17}

./assets/webpack-stats.json will look like,

1{
2  "status":"done",
3  "chunks":{
4   "app":[{
5      "name":"app-0828904584990b611fb8.js",
6      "publicPath":"http://localhost:3000/assets/bundles/app-0828904584990b611fb8.js",
7      "path":"/home/user/project-root/assets/bundles/app-0828904584990b611fb8.js",
8      "sriHash":"sha512-7mTf5s2FNwVU//8WFetpi43RebQCY1+p3IACm0WmaQhSMO+uzDPBKVwJ/MvXX5aiesTrc0T8ne9KigdqJYqp/A=="
9    }]
10  }
11}

In case webpack is still compiling, it'll look like,

1{
2  "status":"compiling",
3}

And errors will look like,

1{
2  "status": "error",
3  "file": "/path/to/file/that/caused/the/error",
4  "error": "ErrorName",
5  "message": "ErrorMessage"
6}

ErrorMessage shows the line and column that caused the error.

And in case logTime option is set to true, the output will look like,

{
  "status":"done",
  "chunks":{
   "app":[{
      "name":"app-0828904584990b611fb8.js",
      "publicPath":"http://localhost:3000/assets/bundles/app-0828904584990b611fb8.js",
      "path":"/home/user/project-root/assets/bundles/app-0828904584990b611fb8.js",
      "sriHash":"sha512-7mTf5s2FNwVU//8WFetpi43RebQCY1+p3IACm0WmaQhSMO+uzDPBKVwJ/MvXX5aiesTrc0T8ne9KigdqJYqp/A=="
    }]
  },
  "startTime":1440535322138,
  "endTime":1440535326804
}

By default, the output JSON will not be indented. To increase readability, you can use the indent option to make the output legible. By default it is off. The value that is set here will be directly passed to the space parameter in JSON.stringify. More information can be found here: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON/stringify

Bundle Tracker Options

filename - Name of the bundle tracker JSON file.
logTime - Optional boolean property to output startTime and endTime in bundle tracker file.
path - Optional bundle tracker output path.
publicPath - Optional property to override output.publicPath.
sriHashEnabled - Defaults to false. Set to true to enable calculation of Sub-Resource Integrity Hashes.
sriHashAlgorithm - Optional algorithm to use when calculating sub-resource integrity hashes. Valid options: sha256, sha384, or sha512. Defaults to sha384.

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

0

SAST

Determines if the project uses static code analysis.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

47 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-6chw-6frg-f759
Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
Warn: Project is vulnerable to: GHSA-vh7m-p724-62c2
Warn: Project is vulnerable to: GHSA-r9p9-mrjm-926w
Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh
Warn: Project is vulnerable to: GHSA-8r6j-v8pm-fqw3
Warn: Project is vulnerable to: MAL-2023-462
Warn: Project is vulnerable to: GHSA-vvj3-85vf-fgmw
Warn: Project is vulnerable to: GHSA-qqgx-2p2h-9c37
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-6c8f-qphg-qjgp
Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m
Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
Warn: Project is vulnerable to: GHSA-fhjf-83wg-r2j9
Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-h9rv-jmmf-4pgx
Warn: Project is vulnerable to: GHSA-hxcc-f52p-wc94
Warn: Project is vulnerable to: GHSA-4g88-fppr-53pp
Warn: Project is vulnerable to: GHSA-4jqc-8m5r-9rpr
Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq
Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
Warn: Project is vulnerable to: GHSA-c4w7-xm78-47vh
Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp

Score

1.7

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More