
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
bootstrap-package-manager
Advanced tools
A simple command line interface for installing and compiling Twitter Bootstrap.
This is a simple command line interface for installing and compiling Twitter Bootstrap written in Node.js. It has many options, but the default is to install everything, without compression. It can also automatically include Font-Awesome.
npm install bootstrap-package-manager -g
bpm [options] <folder>
options are optional, but folder is required and is the path you want to create bootstrap at. If it already exists and isn't empty, bootstrap-package-manager will warn you. Here are available options:
-h, --help : output usage information-V, --version : output the version number-j, --javascript : Add Javascript-c, --css : Add CSS-l, --less : Add Less-i, --images : Add Images-a, --font-awesome : Add Font Awesome-v, --variables <path> : Path to a custom variables.less file to replace the included version.-f, --font-path <path> : Set a custom value for the less variable @FontAwesomePath for a custom css font path when using Font Awesome.-x, --compress : Compress JS and CSS and include as an extra *.min.* file.--compress-js : Compress JS with UglifyJs and include as an extra bootstrap.min.js file.--compress-css : Compress CSS with lessc (YUI) and include as an extra *.min.css file.--no-concat : Don't concat Javascript files together. JS compression not available with this option.--bootstrap-version <version> : Specific Bootstrap version to use. See http://github.com/twitter/bootstrap/tags for full list. Default: master; Example: 2.1.0 or v2.1.0--font-awesome-version <version> : Specific Font Awesome version to use. See http://github.com/FortAwesome/Font-Awesome/tags for full list. Default: master; Example: 3.0.0 or v3.0.0The default is to include all javascript, css, images and less unless you include at least one of the options -j, -c, -l, or -i, in which case only those specified are included.
bpm bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, less and images into it.
bpm -ax bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, less, images and font awesome into it. Then it compresses all of the css and js.
bpm -jcix bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps only js, css, and images into it. Then it compresses all of the css and js.
bpm -x -v ./variables.less bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, images and less files into it. Then it replaces the existing variables.less file with the custom one and compresses all of the css and js.
bpm --bootstrap-version 2.1.0 bootstrap
Creates a new folder in the current working directory named "bootstrap", gets version 2.1.0 of bootstrap and dumps only js, css, less, and images into it.
FAQs
A simple command line interface for installing and compiling Twitter Bootstrap.
The npm package bootstrap-package-manager receives a total of 6 weekly downloads. As such, bootstrap-package-manager popularity was classified as not popular.
We found that bootstrap-package-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.