browserify 17 is out! As usual, the breaking changes are mostly due to core module shims matching upstream changes in Node.js.
New features:
- util.promisify!
- EventEmitter#off!
- events.once!
- stream.pipeline!
https://t.co/xKB43F0oU7
commonjs-assert 1.5.0 is out! This package is used in browserify when you do `require('assert')`.
In the first release in almost 2 years, @lukechilds added the `assert.strict` API from Node.js. https://t.co/FylUm4OFGr
the latest version of the @browserify bundle flattener `browser-pack-flat` now detects modules that are conditionally or lazily `require()`d, fixing issues with some more complex CommonJS patterns. still with minimal runtime for most modules! (←in →out)
https://t.co/BtogMxZgG8
If you are getting static-eval security warnings through brfs, glslify, or similar transforms, your code is not vulnerable. The security warning only applies if you are passing untrusted user input into these transforms.
To clear the warning, update to static-module@^3.0.1.
.@npmjs just declared half of the browserify ecosystem vulnerable to a HIGH security vulnerability that’s not a vulnerability in this case. If you are using @browserify, don’t panic.
@AnthonyEAlvarez@babeljs there is also https://t.co/XNPoEVX3fM, which implements modules more or less according to the current state of node.js's implementation. browserify will likely support something similar to esmify out of the box in the future. you can use it to be future-compatible
@AnthonyEAlvarez@babeljs browserify does not support import syntax yet—it will implement something compatible with node.js when things start landing there. in the mean time, you can use babelify.
browserify 16.0.0 updates `events` to match the Node 8 API; adds --preserve-symlinks flag from Node 6.3; fixes issues resolving transforms installed with `pnpm`. check it out →
https://t.co/UJpjevhMgO
[email protected] removes 10MB worth of unused files from the published package, finally bringing a full bankai install down to <100MB!
https://t.co/aFp0NghEFp
bankai 9.1, now with: faster boot using v8-compile-cache; fix for dependencies shipping their own .babelrc; only copying assets when they were changed (good for `dat share`ing your site!) https://t.co/y5RTikuZlL