
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@roots/bud-framework
Advanced tools
A webpack framework combining the best parts of Laravel Mix and Symfony Encore.
yarn add @roots/bud --dev
Import plugins at the top of your bud.config.js
file
const {eslint} = require('@roots/bud-eslint')
Then, utilize the bud.use
method and register the plugin. Plugins will be called in the provided order.
bud.use([eslint])
Some plugins may provide additional configuration methods. Obviously, you can't call a plugin-provided method without first registering that plugin, which is one of the reasons it's generally a good idea to import and register everything at the top of your config.
bud
.use([dependencyExtraction])
.dependencyExtraction({
injectPolyfill: true,
})
There are a number of Roots maintained plugins available to kickstart your projects.
Name | Description | Usage |
---|---|---|
@roots/bud-dependency-extraction | Adds @wordpress/dependency-extraction-webpack-plugin support. | Usage ↗ |
@roots/bud-eslint | Adds eslint support. | Usage ↗ |
@roots/bud-palette-plugin | Adds palette-webpack-plugin support. | Usage ↗ |
@roots/bud-purgecss | Adds purgecss support. | Usage ↗ |
@roots/bud-react | Adds react support. | Usage ↗ |
@roots/bud-sass | Adds sass preprocessor support. | Usage ↗ |
@roots/bud-stylelint | Adds stylelint support. | Usage ↗ |
@roots/bud-tailwind | Adds tailwindcss support. | Usage ↗ |
@roots/bud-typescript | Adds typescript support. | Usage ↗ |
@roots/bud-vue | Adds Vue framework support. | Usage ↗ |
Contributions are welcome from everyone.
We have contributing guidelines to help you get started.
Help support our open-source development efforts by becoming a patron.
Keep track of development and community news.
FAQs
A friendly build tool to help manage your project assets.
The npm package @roots/bud-framework receives a total of 9,110 weekly downloads. As such, @roots/bud-framework popularity was classified as popular.
We found that @roots/bud-framework demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.