Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
A minimalistic build tool for Node.js projects.
npm install -g bob
Install project dependencies (per Node.js project):
bob dep
Run Bob from project directory:
bob target1 target2 target3 ...
Run Bob with specific environment (by default it uses NODE_ENV=development):
NODE_ENV=production bob start
Run Bob in robot mode (generate XML reports):
BOB_MODE=robot bob style lint test
node {name}.js start|stop|restart|status
jscheckstyle
against all .js files under lib/ directory, configurable via {bob.style.files}jshint
or nodelint
against all .js files under lib/ and test/ directories, configurable via {bob.lint.files}vows
against all .js files under test/ directory, configurable via {bob.test.files}. Run npm test
if scripts.test exists in package.jsonvows
against all .js files under test/ directory with coverage flag, configurable via {bob.coverage.files}npm stop
if scripts.stop exists in package.jsonnpm start
if scripts.start exists in package.jsonnpm restart
if scripts.restart exists in package.jsonBob reads package.json file. NOTE:
Example:
{
"name": "myproject",
"version": "0.0.1",
"bob": {
"src": {
"dir": "mysrc/"
},
"style": {
"files": "foo.js bar/",
"opts": "--checkstyle"
},
"lint": {
"files": "foo.js bar/",
"opts": "--jslint-reporter --config path/to/hintconfig.js"
},
"lintstrict": {
"files": "foo.js bar/",
"opts": "--reporter path/to/lintreporter.js --config path/to/lintconfig.js"
},
"test": {
"files": "bar/*.js",
"opts": "--dot-matrix"
},
"coverage": {
"files": "bar/*.js",
"opts": "--cover-html"
},
"packagemeta": {
"dir": "conf",
"file": "artifact-meta.json"
},
"template": {
"conf/artifact-meta.json": ["version", "name"]
},
"deploy": {
"user": "myuser",
"key": "/local/path/to/mykey"
"host": "myremotehost",
"port": 22,
"dir": "/remote/path/to/${name}/${version}"
}
}
}
Follow @cliffano on Twitter.
0.3.3 - 2012-02-24
FAQs
Convention-based build tool for node.js projects.
The npm package bob receives a total of 37 weekly downloads. As such, bob popularity was classified as not popular.
We found that bob demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.