
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@toolbarthomas/harbor
Advanced tools
Build Drupal compatible Twig styleguides, components and templates within Storybook.
Forget about maintaining multiple environements for your Drupal project: Define, develop and test any Twig pattern within Storybook; implements these patterns within Drupal and apply optional data transformation in seperate Drupal specific templates.
attach_library feature.Harbor is specifically used during the development of your Twig components for a custom Drupal theme or module. You should install Harbor directly within the root of this module/theme context via Node.js:
$ npm install @toolbarthomas/harbor
Harbor will run the default Workers while running the Node command without any arguments. The Workers will process any existing asset within the default configuration.
The default Harbor command will only generate the assets that could be used within the Twig templates. You can generate and view any existing Twig templates within one single command while following the configured structure:
$ node ./node_modules/@toolbarthomas/harbor/index.js --task=setup
Harbor will scan your working directory for any existing Twig component and generates the minimal Storybook stories with optional mocking data. With any Storybook stories template you can view your styleguide via:
$ node ./node_modules/@toolbarthomas/harbor/index.js --styleguide
That's it, a styleguide will be generated or launched according to your environment mode. More information regarding the workflow, API & implementations can be found here:
Harbor comes with optional Worker utilities that can generate the actual assets for the theme. These compilers are completely optional and can always be enabled/disabled according to your configuration:
The actual Workers are triggered from the configured NPM commands,you can customize this configuration and many more via an optional Harbor configration.
See the Front-End Guidelines for more details regarding the usage and documentation.
FAQs
Boilerplate for Drupal Themes
We found that @toolbarthomas/harbor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.