Automic VaultAutomic Vault

brew

Install webpack with Homebrew, apt, Nix

Bundler for JavaScript and friends. Version 5.108.4 via Homebrew; verified 2026-07-06.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install webpack

local Homebrew formula metadata

Linux

Debian aptverified · 92%
sudo apt install webpack

Debian stable package indexes · webpack · source: deb.debian.org

Nixverified · 92%
nix profile install nixpkgs#webpack-cli

nixpkgs package indexes · pkgs/by-name/we/webpack-cli/package.nix · source: api.github.com

overview

Package summary

Bundler for JavaScript and friends

Commands and aliases

  • webpack
  • webpack-cli

history

Project history and usage

webpack is a JavaScript module bundler that builds a dependency graph from application entry points and emits static assets for browsers and other targets. It became one of the defining tools of the 2010s front-end build era because it treated JavaScript, CSS, images, and other assets as modules connected by loaders and plugins.

Project history

The public `webpack/webpack` repository was created on March 10, 2012. GitHub's ReadME Project recounts that Tobias Koppers created webpack while working on a master's thesis for web applications, beginning as an optimizer born from practical need and growing through collaboration with users.

webpack's core model is a static dependency graph. The official concepts documentation explains that webpack starts from one or more entry points, follows the modules an application needs, and combines them into bundles. That model fit the rise of CommonJS, AMD, ES modules, transpilation, CSS preprocessors, and single-page applications.

webpack 4, released in February 2018, lowered the barrier for common use by making a configuration file optional for simple bundles while preserving deep configurability. webpack 5 followed on October 10, 2020, with a major release focused on long-term caching, removals of deprecated behavior, new web-platform features, and development-experience improvements.

Adoption history

webpack spread because it solved several front-end problems at once: bundling JavaScript for browsers, code splitting for on-demand loading, asset processing through loaders, optimization through plugins, and a configurable build pipeline that frameworks could wrap. The ReadME Project characterized it as used by millions of developers around the world.

Its adoption was reinforced by the surrounding loader/plugin ecosystem and by framework tooling that hid or generated webpack configurations. Even as newer tools such as Rollup, Parcel, esbuild, Vite, and Turbopack changed developer expectations, webpack remained significant in long-lived applications, enterprise build systems, and projects relying on its mature plugin surface.

webpack 5's Module Federation gave the project a second adoption story beyond classic bundling. The webpack 5 release notes describe Module Federation as allowing multiple webpack builds to work together at runtime, enabling independently built code to behave like a connected module graph.

How it is used

Developers use webpack by defining entry points, output settings, loaders, plugins, and mode-specific behavior, usually in `webpack.config.js` for non-trivial projects. Since webpack 4, simple projects can run without an explicit config, but package maintainers still recognize the config file as the center of serious webpack setups.

Common usage patterns include compiling modern JavaScript and TypeScript for browsers, bundling CSS and images with content hashes, splitting code by route, running development servers with hot updates, and generating optimized production assets. In larger systems, webpack configuration often becomes shared infrastructure owned by platform or build-tooling teams.

Why package nerds care

webpack is package-nerd famous because it made `node_modules` and browser delivery collide at industrial scale. Its loader and plugin conventions shaped how npm packages advertise browser entry points, side effects, CSS handling, and asset behavior.

It is also a landmark in build-tool ergonomics: powerful enough to become the default, configurable enough to become notorious, and stable enough that newer tools are often explained by comparing what they simplify or replace from webpack-era workflows.

Timeline

  • 2012-03-10: Public GitHub repository `webpack/webpack` created.
  • 2012: Tobias Koppers began webpack while working on a master's thesis for web applications.
  • 2018-02: webpack 4 released; configuration became optional for simple bundles.
  • 2020-10-10: webpack 5.0.0 released.
  • 2020: webpack 5 introduced Module Federation for connecting independently built webpack builds at runtime.
  • 2026-07-02: The GitHub API showed continued activity on the `webpack/webpack` repository.

Related projects

  • webpack is commonly discussed alongside Rollup, Parcel, Browserify, esbuild, Vite, Turbopack, Babel, TypeScript, and framework CLIs. Within webpack itself, webpack-cli, loaders, plugins, and Module Federation form much of the practical ecosystem.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for webpack. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 1 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
webpack.config.js

executables

Installed executables

CommandKindExposureNote
webpackcliglobal executable
webpack-clicliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version5.108.4
manager updated2026-07-06
local dataok
upstreamnot checked
latest detectednot detected

https://webpack.js.org/

install metadata

Package metadata

Package keybrew:webpack
Version5.108.4
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/webpack
Homepagehttps://webpack.js.org/
Repositoryhttps://github.com/webpack/webpack
Upstream docshttps://webpack.js.org/concepts
LicenseMIT
Source archivehttps://registry.npmjs.org/webpack/-/webpack-5.108.4.tgz
Last updated2026-07-06T17:57:07Z
Pulseupdated
Dependenciesnode
Bottleavailable (on all)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namewebpack
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

webpack 5.97.1+dfsg1+~cs11.18.27-3

Packs CommonJs/AMD modules for the browser

https://github.com/webpack/webpack

sudo apt install webpack
  • Section: javascript
  • Architecture: all
  • Source Package: node-webpack
  • 31 dependencies
  • 9 provides
  • normalized package name match
  • Matched by: Webpack
Debian stable package indexes · deb.debian.org · Debian stable package indexes: webpack from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt95%

webpack 5.76.1+dfsg1+~cs17.16.16-1

Packs CommonJs/AMD modules for the browser

https://github.com/webpack/webpack

sudo apt install webpack
  • Section: universe/javascript
  • Architecture: all
  • Source Package: node-webpack
  • 30 dependencies
  • 9 provides
  • normalized package name match
  • Matched by: Webpack
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: webpack from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Nix92%

webpack-cli

nix profile install nixpkgs#webpack-cli
  • installed executable or alias match
  • Matched by: Webpack Cli
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/we/webpack-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment