
Security News
Meet Socket at Black Hat and DEF CON 2025 in Las Vegas
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
bob-the-bundler
Advanced tools
Bob is the TypeScript build, bundle and verification tool used by almost all The Guild open source projects.
Scope:
Setting up bob is currently undocumented. You can check GraphQL Code Generator repository (or any other The Guild repository).
You can add a bob
key to each package.json
.
Disable bob for a single package
{
"name": "graphql-lfg",
"bob": false // exclude a single package from all things bob related
}
Disable build for a single package
{
"name": "graphql-lfg",
"bob": {
"build": false
}
}
Disable check for a single package
{
"name": "graphql-lfg",
"bob": {
"check": false
}
}
Disable check for a single export in a package
{
"name": "graphql-lfg",
"bob": {
"check": {
"skip": ["./foo"]
}
}
}
$ bob build
$ bob check
FAQs
Bob The Bundler!
The npm package bob-the-bundler receives a total of 23,897 weekly downloads. As such, bob-the-bundler popularity was classified as popular.
We found that bob-the-bundler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.
Security News
Deno 2.4 brings back bundling, improves dependency updates and telemetry, and makes the runtime more practical for real-world JavaScript projects.