Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@bigcommerce/stencil-cli
Advanced tools
CLI tool to run BigCommerce Stores locally for theme development.
$ npm install -g @bigcommerce/stencil-cli
For more details visit the Installation Guide
Usage: stencil [options] [command]
Commands:
init Interactively create a .stencil file which configures how to run a BigCommerce store locally.
start Starts up BigCommerce store using theme files in the current directory.
bundle Bundles up the theme into a zip file which can be uploaded to BigCommerce.
release Create a new release in the theme's github repository.
help [cmd] display help for [cmd]
Options:
-h, --help output usage information
-V, --version output the version number
$ stencil init
- Run this at the top level of your Stencil Theme. It will ask you a few questions to get your started.
$ stencil start
- This will run a local server so you can start developing your theme.
-o
or --open
to automatically open up a browser.rs
and then hit enter to auto-reload all browsers. This is similar to Nodemon's rs
option.-e
to load a local Theme Editor$ stencil bundle
- This command will run some validations and then it will create a bundle zip file which can be uploaded to BigCommerce.
$ stencil release
- This command will tag a new version of your theme, create a GitHub Release in your theme repository and upload the bundle file to the release assets. This is useful for tracking your changes in your Theme, and is the tool we use to create new releases in BigCommerce Cornerstone theme
Stencil CLI comes packaged with BrowserSync so you can take advantage of all of those amazing goodies! Have a look at their website for more information: http://www.browsersync.io/
You are able to compile your CSS using SASS (node-sass
) by placing your .scss
files in assets/scss/
. For example, add a scss file named theme.scss
to assets/scss/
and in your theme add {{{stylesheet 'assets/css/theme.css'}}}
to your html template. Stencil-CLI will compile theme.scss
to css
on the fly.
Stencil CLI comes packaged with Autoprefixer. You can set which browsers that should be targeted as well as if it should cascade the generated rules in the theme's config.json
file with these options:
autoprefixer_cascade
- Defaults to true
autoprefixer_browsers
- Defaults to ["> 5% in US"]
If you need any help or experience any bugs, please create a GitHub issue in this repo.
Copyright (c) 2015-2016, BigCommerce Inc. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
THIS SOFTWARE IS PROVIDED BY BIGCOMMERCE INC ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL BIGCOMMERCE INC BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
FAQs
CLI tool to run BigCommerce Stores locally for theme development.
The npm package @bigcommerce/stencil-cli receives a total of 2,466 weekly downloads. As such, @bigcommerce/stencil-cli popularity was classified as popular.
We found that @bigcommerce/stencil-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.