gradejs
GradeJS analyzes production Webpack bundles without having access to the source code of a website. Instantly see vulnerabilities, outdated packages, and more just by entering a web application URL. (by gradejs)
yarn.build
Build 🛠and Bundle 📦 your local workspaces. Like Bazel, Buck, Pants and Please but for Yarn Berry. Build any language, mix javascript, typescript, golang and more in one polyglot repo. Ship your bundles to AWS Lambda, Docker, or any nodejs runtime. (by ojkelly)
Our great sponsors
| gradejs | yarn.build | |
|---|---|---|
| 16 | 2 | |
| 398 | 318 | |
| 0.0% | - | |
| 0.0 | 7.0 | |
| over 1 year ago | about 2 months ago | |
| TypeScript | TypeScript | |
| MIT License | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
gradejs
Posts with mentions or reviews of gradejs.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-11-01.
-
Find out which NPM packages are used on your favourite website
That's weird. Could you please provide more details and submit an issue? https://github.com/gradejs/gradejs/issues
-
Open source website bundle analyzer that shows vulnerable NPM packages
I’d like to share an open source project I’ve been working on during the last year. It analyzes production JavaScript code and detects bundled NPM package versions. A vulnerability is shown when a specific detected version contains known vulnerabilities, taken from the Github advisory.
There’s also a dedicated package page, that shows accumulated statistics of a package. It’s like wappalyzer or builtwith but with better accuracy. For example: https://gradejs.com/package/react
So far I’ve only indexed ~10,000 popular websites. The current version works for Webpack bundles with 70-90% accuracy and ~3% false positive. The package detection algorithm is designed to match minified and tree-shaken AST subtrees for each export per bundled JS module.
I'd like to collect any feedback from the community.
Repository: https://github.com/gradejs/gradejs
-
I created a tool, that detects NPM package versions used on a website
Source code: https://github.com/gradejs/gradejs
-
Open source tool that detects bundled NPM packages on a website
Well, the accuracy question is tricky, since there are two problems. A false positive mistake is a tool showing something that IS NOT bundled. A false negative mistake would be a tool NOT showing something that IS bundled. Currently we see ~30% FN and ~5% FP for GradeJS accuracy. More info.
- GradeJS – Production Webpack Bundle Analyzer
-
FOSS: A website scanner that detects vulnerable NPM packages.
Try it out: gradejs.com
-
A tool that identifies NPM libraries inside production Webpack bundle by entering a website URL
Source code: https://github.com/gradejs/gradejs
- GitHub - gradejs/gradejs: GradeJS analyzes production Webpack bundles without having access to the source code of a website. Instantly see vulnerabilities, outdated packages, and more just by entering a web application URL.
-
I made a project that detects NPM package versions bundled into website source code
Link: gradejs.com Source code: github.com/gradejs/gradejs
- Production Webpack bundle analyzer without access to the source code
yarn.build
Posts with mentions or reviews of yarn.build.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-09-01.
- Monorepos will ruin your life – but they're worth it
-
Yarn 3.0.0
```
It’s still a bit experimental, but works pretty well.
—
It’s all open source on GitHub, if you have any issues using it.
https://github.com/ojkelly/yarn.build