Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@roots/bud
Advanced tools
Configurable, extensible build tools for modern single and multi-page web applications
Configurable, extensible build tools for modern single and multi-page web applications
Install @roots/bud to your project.
Yarn:
yarn add @roots/bud --dev
npm:
npm install @roots/bud --save-dev
For help getting started consult the Getting Started guide on bud.js.org
bud.js is invoked with the bud
command.
Call bud --help
for usage information.
Instantiate bud.js using the factory
export:
import { factory } from "@roots/bud/factory";
const bud = await factory();
Contributions are welcome from everyone.
We have contribution guidelines to help you get started.
@roots/bud is licensed under MIT.
Keep track of development and community news.
bud.js is an open source project and completely free to use.
However, the amount of effort needed to maintain and develop new features and projects within the Roots ecosystem is not sustainable without proper financial backing. If you have the capability, please consider sponsoring Roots.
FAQs
Configurable, extensible build tools for modern single and multi-page web applications
The npm package @roots/bud receives a total of 8,770 weekly downloads. As such, @roots/bud popularity was classified as popular.
We found that @roots/bud demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.