npmpackage.info

Gathering detailed insights and metrics for @vitejs/plugin-react-refresh

Other packages similar to @vitejs/plugin-react-refresh

@vitejs/plugin-react

4.6.0

The default Vite plugin for React projects

@vitejs/plugin-react-swc

3.10.2

Speed up your Vite dev server with SWC

vite-plugin-react-refresh

1.0.0

Provide enhancements for @vitejs/plugin-react-refresh.

@knightly/vitejs__plugin-react-refresh

1.3.6-knightly-main.202109070059

[![Knightly Build](https://github.com/knightlyjs/knightly/blob/main/res/badge.svg?raw=true)](https://github.com/knightlyjs/knightly) ![2021-09-07T01:00:33.177Z](https://img.shields.io/date/1630976433?color=eee&label=)

Gathering detailed insights and metrics for @vitejs/plugin-react-refresh

@vitejs/plugin-react-refresh - 1.3.6 | npmpackage.info

@vitejs/plugin-react-refresh

Next generation frontend tooling. It's fast!

1.3.6

73,945

MIT

TypeScript

290.00 kB

14,387,441 7.1

Installations

npm install @vitejs/plugin-react-refresh

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

>=12.0.0

Score

89.5

Supply Chain

87.5

Quality

80.7

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

156

Total

7,133

Closed

1,537

Merged

5,440

Issues

Open

479

Total

8,010

Closed

7,531

Releases

579

v7.0.2

Updated on Jul 04, 2025

v7.0.1

Updated on Jul 03, 2025

create-vite@7.0.0

Updated on Jun 24, 2025

plugin-legacy@7.0.0

Updated on Jun 24, 2025

v7.0.0

Updated on Jun 24, 2025

plugin-legacy@7.0.0-beta.1

Updated on Jun 17, 2025

View All 579 releases

Languages

TypeScript

JavaScript

HTML

CSS

Vue

AppleScript

SCSS

Svelte

Less

Stylus

Shell

Pug

Sass

SugarSS

Astro

TypeScript (83.23%)

JavaScript (9.82%)

HTML (5.16%)

CSS (1.23%)

Vue (0.14%)

AppleScript (0.11%)

SCSS (0.1%)

Svelte (0.1%)

Less (0.05%)

Stylus (0.02%)

Shell (0.01%)

Pug (0.01%)

Sass (0.01%)

SugarSS (0.01%)

Developer

vitejs

Download Statistics

Total Downloads

14,387,441

Last Day

2,704

Last Week

56,313

Last Month

268,763

Last Year

3,719,912

GitHub Statistics

MIT License

73,945 Stars

7,907 Commits

6,905 Forks

454 Watchers

44 Branches

1,126 Contributors

Updated on Jul 04, 2025

Bundle Size

1.16 MB

Minified

290.00 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 1,126 Contributors

Package Meta Information

Latest Version

1.3.6

Package Id

@vitejs/plugin-react-refresh@1.3.6

Size

6.13 kB

Published on

Jul 27, 2021

Total Downloads

Cumulative downloads

Total Downloads

14,387,441

Last Day

-49.9%

2,704

Compared to previous day

Last Week

-20.1%

56,313

Compared to previous week

Last Month

11.8%

268,763

Compared to previous month

Last Year

15.7%

3,719,912

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@babel/core @babel/plugin-transform-react-jsx-self @babel/plugin-transform-react-jsx-source @rollup/pluginutils react-refresh

@vitejs/plugin-react-refresh

Provides React Refresh support for Vite.

1// vite.config.js
2import reactRefresh from '@vitejs/plugin-react-refresh'
3
4export default {
5  plugins: [reactRefresh()]
6}

Specifying Additional Parser Plugins

If you are using ES syntax that are still in proposal status (e.g. class properties), you can selectively enable them via the parserPlugins option:

1export default {
2  plugins: [
3    reactRefresh({
4      parserPlugins: ['classProperties', 'classPrivateProperties']
5    })
6  ]
7}

Full list of Babel parser plugins.

Specifying files to include or exclude from refreshing

By default, @vite/plugin-react-refresh will process files ending with .js, .jsx, .ts, and .tsx, and excludes all files in node_modules.

In some situations you may not want a file to act as an HMR boundary, instead preferring that the changes propagate higher in the stack before being handled. In these cases, you can provide an include and/or exclude option, which can be regex or a picomatch pattern, or array of either. Files must match include and not exclude to be processed. Note, when using either include, or exclude, the defaults will not be merged in, so re-apply them if necessary.

1export default {
2  plugins: [
3    reactRefresh({
4      // Exclude storybook stories and node_modules
5      exclude: [/\.stories\.(t|j)sx?$/, /node_modules/],
6      // Only .tsx files
7      include: '**/*.tsx'
8    })
9  ]
10}

Notes

If using TSX, any TS-supported syntax will already be transpiled away so you won't need to specify them here.
This option only enables the plugin to parse these syntax - it does not perform any transpilation since this plugin is dev-only.
If you wish to transpile the syntax for production, you will need to configure the transform separately using @rollup/plugin-babel as a build-only plugin.

Middleware Mode Notes

When Vite is launched in Middleware Mode, you need to make sure your entry index.html file is transformed with ViteDevServer.transformIndexHtml. Otherwise, you may get an error prompting Uncaught Error: @vitejs/plugin-react-refresh can't detect preamble. Something is wrong.

To mitigate this issue, you can explicitly transform your index.html like this when configuring your express server:

1app.get('/', async (req, res, next) => {
2  try {
3    let html = fs.readFileSync(path.resolve(root, 'index.html'), 'utf-8')
4    html = await viteServer.transformIndexHtml(req.url, html)
5    res.send(html)
6  } catch (e) {
7    return next(e)
8  }
9})

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

8

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

7

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

7

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

7

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

6

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 6

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/preview-release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/preview-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-tag.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/release-tag.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-tag.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite/release-tag.yml/main?enable=pin
Warn: downloadThenRun not pinned by hash: .github/workflows/ci.yml:183
Info: 0 out of 18 GitHub-owned GitHubAction dependencies pinned
Info: 11 out of 12 third-party GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned

3

SAST

Determines if the project uses static code analysis.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

Score

7.1

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More