
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@ui5/builder
Advanced tools

⚠️ REPOSITORY MOVED
The
@ui5/builderpackage is now maintained in the UI5 CLI monorepo. This repository contains the code up to and including CLI version 4, with further development continuing in the monorepo.
- New location: https://github.com/UI5/cli/tree/main/packages/builder
- Issues & PRs: Please submit to the monorepo
- Latest releases: Available from the monorepo
Modules for building UI5 projects
Part of the UI5 CLI
UI5 Builder documentation can be found here: ui5.github.io/cli
The UI5 Builder API Reference can be found here: @ui5/builder
Please check our Contribution Guidelines.
Please follow our Contribution Guidelines on how to report an issue.
Please report issues in the main UI5 CLI repository.
See CHANGELOG.md.
Webpack is a popular module bundler for JavaScript applications. It offers a wide range of plugins and loaders to handle different types of assets and optimize the build process. Compared to @ui5/builder, Webpack is more general-purpose and can be used for various types of projects, not just UI5.
Gulp is a toolkit for automating tasks in the development workflow. It uses a code-over-configuration approach and allows you to define tasks using JavaScript. Gulp is highly extensible and can be used for a variety of build tasks, similar to @ui5/builder, but it is not specifically tailored for UI5 projects.
Grunt is a JavaScript task runner that automates repetitive tasks like minification, compilation, and unit testing. It uses a configuration-over-code approach and has a large ecosystem of plugins. While Grunt can be used for building UI5 projects, it is more general-purpose compared to @ui5/builder.
FAQs
UI5 CLI - Builder
The npm package @ui5/builder receives a total of 74,236 weekly downloads. As such, @ui5/builder popularity was classified as popular.
We found that @ui5/builder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.