Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
A minimalistic build tool for Node.js projects.
Bob provides common build targets (clean, checkstyle, lint, test, coverage, package, deploy, stop, start, status, restart) for Node.js libs/apps. It essentially allows multiple projects to use the same Makefile stored in a global node_modules. Bob uses bash shell.
npm install -g bob
Bob reads package.json file. NOTE:
Example:
{
"name": "myproject",
"version": "0.0.1",
"bob": {
"src": {
"dir": "mysrc/"
},
"checkstyle": {
"files": "foo.js bar/",
"opts": "--checkstyle"
},
"hint": {
"files": "foo.js bar/",
"opts": "--jslint-reporter --config path/to/hintconfig.js"
},
"lint": {
"files": "foo.js bar/",
"opts": "--reporter path/to/lintreporter.js --config path/to/lintconfig.js"
},
"test": {
"files": "bar/*.js",
"opts": "--dot-matrix"
},
"coverage": {
"files": "bar/*.js",
"opts": "--cover-html"
},
"packagemeta": {
"dir": "conf",
"file": "artifact-meta.json"
},
"template": {
"conf/artifact-meta.json": ["version", "name"]
},
"deploy": {
"user": "myuser",
"key": "/local/path/to/mykey"
"host": "myremotehost",
"port": 22,
"dir": "/remote/path/to/${name}/${version}"
}
}
}
Project convention:
node {name}-app.js start|stop|restart|status
, e.g. using learnboost/clusterInstall required tools. (per Bob installation)
bob tools
Install project dependencies. (per Node.js project)
bob dep
Run Bob from project directory.
bob target1 target2 target3 ...
Run Bob with specific environment. (by default it uses NODE_ENV=development)
NODE_ENV=production bob start
Run Bob in robot mode (generate XML reports)
BOB_MODE=robot bob checkstyle hint test
jscheckstyle
against all .js files under lib/ directory, configurable via {bob.checkstyle.files}nodelint
against all .js files under lib/ and test/ directories, configurable via {bob.lint.files}jshint
against all .js files under lib/ and test/ directories, configurable via {bob.hint.files}vows
against all .js files under test/ directory, configurable via {bob.test.files}. Run npm test
if scripts.test exists in package.jsonvows
against all .js files under test/ directory with coverage flag, configurable via {bob.coverage.files}npm stop
if scripts.stop exists in package.jsonnpm start
if scripts.start exists in package.jsonnpm restart
if scripts.restart exists in package.json0.2.6 - 2011-10-19
FAQs
Convention-based build tool for node.js projects.
The npm package bob receives a total of 62 weekly downloads. As such, bob popularity was classified as not popular.
We found that bob demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.