npmpackage.info

Gathering detailed insights and metrics for webpack-webextension-plugin

Other packages similar to webpack-webextension-plugin

@webextension-toolbox/webpack-webextension-plugin

3.3.1

Webpack plugin that compiles web-extension manifest.json files and adds smart auto reload

webpack-target-webextension

2.1.3

WebExtension plugin for Webpack. Supports code-splitting and dynamic import.

webpack-webextension-runtime-plugin

1.0.3

webpack plugin that hooks jsonpScriptSrc for webextensions

wext-manifest-webpack-plugin

1.4.1

Webpack plugin to solve the problem of generating js file for manifest.json entry

Gathering detailed insights and metrics for webpack-webextension-plugin

webpack-webextension-plugin - 1.0.0 | npmpackage.info

webpack-webextension-plugin

Webpack plugin that compiles WebExtension manifest.json files and adds smart auto reload

1.0.0

NOASSERTION

TypeScript

37.91 kB

4.5

Installations

npm install webpack-webextension-plugin

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>=12

Node Version

16.14.0

NPM Version

8.3.1 Pull Requests

Open

2

Total

765

Closed

702

Merged

61

Issues

Open

0

Total

18

Closed

18

Releases

3.3.1

Updated on Jan 08, 2024

3.2.1

Updated on Oct 28, 2023

3.1.0

Updated on Jun 13, 2023

3.0.0

Updated on Mar 13, 2023

2.1.3

Updated on Jun 03, 2022

2.1.2

Updated on Apr 19, 2022

View All 16 releases

Languages

TypeScript

JavaScript

TypeScript (93.37%)

JavaScript (6.63%)

Developer

webextension-tools

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

NOASSERTION License

82 Stars

262 Commits

22 Forks

2 Watchers

7 Branches

14 Contributors

Updated on Jul 11, 2025

Maintainers

View All 14 Contributors

Package Meta Information

Latest Version

1.0.0

Package Id

webpack-webextension-plugin@1.0.0

Unpacked Size

37.91 kB

Size

12.26 kB

File Count

NPM Version

8.3.1

Node Version

16.14.0

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

chalk joi strip-ansi ws

Dev Dependencies

jest standard tmp-promise

Webpack WebExtension Plugin

Webpack plugin that compiles web-extension manifest.json files and adds smart auto reload.

What does it do?

Autoreload extensions via websockets
Use vendor prefixes in manifest properties
Validates some manifest.json fields

Install

1$ npm i webpack-webextension-plugin

Usage

1const WebextensionPlugin = require('webpack-webextension-plugin')
2
3const config = {
4  plugins: [
5    new WebextensionPlugin({
6      vendor: 'chrome'
7    })
8  ]
9}

API

new WebextensionPlugin([options])

Add result to webpack plugins to initialize.

options

Type: Object

Any of the options below.

vendor

Type: String
Default: chrome
Any of: chrome, opera, firefox, edge, safari

Used for vendor prefixing in the manifest.json. More infos regarding this can be found below.

port

Type: Integer
Default: 35729

Specify the listening port for the webstocket development server.

autoreload

Type: Boolean
Default: true

Enables auto reload. If not specified will be enabled when using webpacks watch mode.

quiet

Type: Boolean
Default: false

Disable plugin logging.

reconnectTime

Type: Integer
Default: 3000

Specify the reconnect time to the development server from the extension side.

manifestDefaults

Type: Object
Default: {}

Allows you to define defaults for the manifest.json file.

FAQ

How does smart autoreload work?

We create/extend a background page in the extension with a websockets client, that connects to our custom websocket server. As soon as a specific files changes the client checks how to reload the extension:

if manifest.json change → full reload
if manifest.json dependencies change → full reload
if _locales change → full reload
else reload current tab & all extension views

What are vendor prefixed manifest keys?

Vendor prefixed manifest keys allow you to write one manifest.json for multible vendors.

1{
2  "__chrome__name": "SuperChrome",
3  "__firefox__name": "SuperFox",
4  "__edge__name": "SuperEdge",
5  "__opera__name": "SuperOpera",
6  "__safari__name": "SuperSafari"
7}

if the vendor is chrome this compiles to:

1{
2  "name": "SuperChrome",
3}

Add keys to multiple vendors by seperating them with | in the prefix

{
  __chrome|opera__name: "SuperBlink"
}

if the vendor is chrome or opera, this compiles to:

{
  "name": "SuperBlink"
}

Why are you not using mozillas web-ext package?

webpack-webextension-plugin should work for every browser in the same way.
web-ext only works with Chrome and Firefox. You should definitely still check it out.

License

This project is free software released under the MIT license.

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

9

License

Determines if the project has defined a license.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

8

SAST

Determines if the project uses static code analysis.

7

Maintained

Determines if the project is "actively maintained".

5

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 5

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/webextension-toolbox/webpack-webextension-plugin/release.yml/main?enable=pin
Info: 0 out of 16 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 6 out of 6 npmCommand dependencies pinned

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

4.5

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to webpack-webextension-plugin

Other packages similar to webpack-webextension-plugin

webpack-webextension-plugin

Installations

Developer Guide

No

CommonJS

>=12

16.14.0

8.3.1

Pull Requests

2

765

702

61

Issues

0

18

18

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

Webpack WebExtension Plugin

What does it do?

Install

Usage

API

new WebextensionPlugin([options])

options

vendor

port

autoreload

quiet

reconnectTime

manifestDefaults

FAQ

How does smart autoreload work?

What are vendor prefixed manifest keys?

Why are you not using mozillas web-ext package?

Links

License

10

10

9

9

8

7

5

2

0

0

0

0

0

0

4.5

/10