runtime-import

runtime-import copied to clipboard

关于 packagejson 中 设置 '"type": "module"' 时 webpack打包报错问题

3

 esm规范为 npm packagejson 在配置type：module 时 打包文件内的文件引用 应该都需要带文件后缀才行。目前runtime-import包的ts编译产出文件内 文件引用都没后缀 导致webpack 打包报错。 目前解决方案如下： https://webpack.js.org/api/module-methods/ Rule.resolve.fullySpecified = false 但终极方案 还是开发者 把 package.json 中 type：module 去掉 或者 把编译后的文件引用全部加上后缀

TunnelHunter

Bumps [terser](https://github.com/terser/terser) from 5.10.0 to 5.14.2. Changelog Sourced from terser's changelog. v5.14.2 Security fix for RegExps that should not be evaluated (regexp DDOS) Source maps improvements (#1211) Performance improvements in...

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Tracking issue for: - [ ] https://github.com/yusangeng/runtime-import/security/code-scanning/1

yusangeng

如果远程的js有externals，则会报错。

2

 如图所示，走入amd之后，会从factory去拿这些依赖

hengwangm

Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8. Changelog Sourced from minimist's changelog. v1.2.8 - 2023-02-09 Merged [Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17) [Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12) [Fix]...

dependabot[bot]

Bumps [ua-parser-js](https://github.com/faisalman/ua-parser-js) from 0.7.31 to 0.7.33. Changelog Sourced from ua-parser-js's changelog. Version 0.7.31 / 1.0.2 Fix OPPO Reno A5 incorrect detection Fix TypeError Bug Use AST to extract regexes and...

dependabot[bot]

Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2. Release notes Sourced from json5's releases. v1.0.2 Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a...

dependabot[bot]

Bumps [qs](https://github.com/ljharb/qs) and [body-parser](https://github.com/expressjs/body-parser). These dependencies needed to be updated together. Updates `qs` from 6.7.0 to 6.11.0 Changelog Sourced from qs's changelog. 6.11.0 [New] [Fix] stringify: revert 0e903c0; add commaRoundTrip...

dependabot[bot]

Bumps [engine.io](https://github.com/socketio/engine.io) from 6.1.0 to 6.2.1. Release notes Sourced from engine.io's releases. 6.2.1 :warning: This release contains an important security fix :warning: A malicious client could send a specially crafted...

dependabot[bot]