Gathering detailed insights and metrics for serverless-plugin-monorepo
Gathering detailed insights and metrics for serverless-plugin-monorepo
A Serverless plugin that allows use of serverless in a JS mono repo.
Installations
npm install serverless-plugin-monorepoDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Min. Node Version
>=10
Releases
11
Languages
3
TypeScript
JavaScript
Shell
TypeScript (86.75%)
JavaScript (6.64%)
Shell (6.61%)
Developer
butterwire
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MPL-2.0 License
170 Stars
51 Commits
34 Forks
5 Watchers
4 Branches
6 Contributors
Updated on Jun 30, 2025
Maintainers
1
Package Meta Information
Latest Version
0.11.0
Package Id
serverless-plugin-monorepo@0.11.0
Unpacked Size
31.28 kB
Size
9.76 kB
File Count
8
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Peer Dependencies
1
serverless-plugin-monorepo
A Serverless plugin design to make it possible to use Serverless in a Javascript mono repo with hoisted dependencies, e.g. when using Yarn Workspaces.
This plugin alleviates the need to use nohoist functionality by creating symlinks to all declared dependencies. Development dependencies are deliberately NOT linked so these will not be packaged into the resulting archive.
Butterwire uses Yarn workspaces and we created this plugin to improve our development experience. Not using nohoist saves wasting disk space and also accidentally including development dependencies in our packaged functions.
Note, this package will only work on operating systems that support symbolic links!
Installation
yarn add --dev serverless-plugin-monorepo
# or using NPM
npm install --dev serverless-plugin-monorepo
Currently this plugin requires Node V10+. If there is interest in support older versions then trans-compilation with Babel could be added.
Usage
Add the plugin to your serverless.yml file:
plugins:
- serverless-plugin-monorepo
The plugin listens for package lifecycle events. Prior to Serverless packaging
up the service, it will scan the package.json file for dependencies and
ensure that all dependencies (including transitive dependencies) are symlinked in node_modules.
Hence when Serverless creates the archive, it will follow the symlinks and all dependencies will be added as expected. Development/peer dependencies are ignored.
The plugin will run when you do:
- A full deployment (
sls deploy) - Deployment of individual functions (
sls deploy -f) - Spinning up a local sandbox with serverless-offline (
sls offline [start])
Settings
On Windows platforms only, the package will create junction links by default as these do not require administrative privileges on older versions of Windows.
You can set the linkType setting to dir to create symbolic links instead. This setting is directly passed to the fs.symlink function. It is ignored on non Windows platforms.
Contributing
We welcome issue reports and pull requests!
There is a small run script which will launch Node V14 in a Docker container which
you may find useful for development purposes.
Note we are using Prettier with Typescript ESLint and you can run
the lint tool via yarn lint which will attempt to automatically issues like spacing etc.
Copyright
Copyright Butterwire Limited 2018 - 2020
No vulnerabilities found.
Reason
no vulnerabilities detected
Reason
tokens are read-only in GitHub workflows
Reason
license file detected
Details
- Info: : LICENSE:1
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
all dependencies are pinned
Details
- Info: GitHub-owned GitHubActions are pinned
- Info: Third-party GitHubActions are pinned
- Info: Dockerfile dependencies are pinned
- Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
- Info: no insecure (not pinned by hash) dependency downloads found in shell scripts
Reason
update tool detected
Details
- Info: Dependabot detected
Reason
GitHub code reviews found for 15 commits out of the last 30 -- score normalized to 5
Details
- Warn: no reviews found for commit: 3852e032b9cfc2f16d4cfc097aa24bb9a177f2c0
- Warn: no reviews found for commit: 8486255ece064bb5958cf656d4badded58ab3339
- Warn: no reviews found for commit: 41c0c36603e50b37db6dcc96cb95672c48828cf0
- Warn: no reviews found for commit: 1c02db77e8e2b19b59f53b79585a52c5e00032d7
- Warn: no reviews found for commit: 2ebd78fb4ea98885989f05631d163f32aa408ad4
- Warn: no reviews found for commit: 8854a047b9239158a12f6c1c0fc6777da74208c9
- Warn: no reviews found for commit: fe39c7e0d329a258d2c5f0285a43253b65be7ddb
- Warn: no reviews found for commit: 220a1489c5929fb6ba7b55274b9c7b6843134ff7
- Warn: no reviews found for commit: 51f69d3521f8c1d5e802ce644bc51da2c074df7d
- Warn: no reviews found for commit: 699b993fe14af0ba04ea2654d0fa6d63dce34051
- Warn: no reviews found for commit: 86841d5993b153d83fdd3ff7e05c51b598dd784b
- Warn: no reviews found for commit: a5669df42f14831d3f677a85100cc783e7e62175
- Warn: no reviews found for commit: 2e2c9ff2af07eb3d65b23fa2c9d33025d41953fb
- Warn: no reviews found for commit: dd91627de434e4e19d21670a151ee28f0c39f219
- Warn: no reviews found for commit: 85dac8460254fa2d11a9a8a6dbdb29a9fe10bc42
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'master'
- Info: 'allow deletion' disabled on branch 'master'
- Warn: no status checks found to merge onto branch 'master'
- Warn: number of required reviewers is only 0 on branch 'master'
Reason
0 commit(s) out of 30 and 0 issue activity out of 23 found in the last 90 days -- score normalized to 0
Reason
no badge detected
Reason
security policy file not detected
Reason
project is not fuzzed
Score
6.5
/10
Last Scanned on 2022-08-15
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More