
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
bootstrap-package-manager
Advanced tools
A simple command line interface for installing and compiling Twitter Bootstrap.
This is a simple command line interface for installing and compiling Twitter Bootstrap written in Node.js. It has many options, but the default is to install everything, without compression. It can also automatically include Font-Awesome and a custom variables.less file.
npm install bootstrap-package-manager -g
bpm [options] <folder>
Both options and folder are optional. folder is the path you want to dump the bootstrap files in and defaults to ./bootstrap. If the directory already exists and isn't empty, bootstrap-package-manager will warn you. Here are available options:
-h, --help : output usage information-V, --version : output the version number-j, --javascript : Add Javascript-c, --css : Add CSS-l, --less : Add Less-i, --img : Add Images-a, --font-awesome : Add Font Awesome-v, --variables <path> : Path to a custom variables.less file to replace the included version.-f, --font-path <path> : Set a custom value for the less variable @FontAwesomePath for a custom css font path when using Font Awesome.-s, --script <paths> : Include javascript files (seperated by commas) with custom runtime instructions. See src/font-awesome.coffee or src/variables.coffee for examples.-x, --compress : Compress JS and CSS and include as an extra *.min.* file.--compress-js : Compress JS with UglifyJs and include as an extra bootstrap.min.js file.--compress-css : Compress CSS with lessc (YUI) and include as an extra *.min.css file.--no-concat : Don't concat Javascript files together. JS compression not available with this option.--bootstrap-version <version> : Specific Bootstrap version to use. See http://github.com/twitter/bootstrap/tags for full list. Default: master; Example: 2.1.0 or v2.1.0--font-awesome-version <version> : Specific Font Awesome version to use. See http://github.com/FortAwesome/Font-Awesome/tags for full list. Default: master; Example: 3.0.0 or v3.0.0The default is to include all javascript, css, images and less unless you include at least one of the options -j, -c, -l, or -i, in which case only those specified are included.
Sometimes, bootstrap-package-manager likes to... fail. This is probably due to a file request or stream failure. If this happens, attempt a few reruns and then if the problem still occurs, submit issue report.
bpm bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, less and images into it.
bpm -ax bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, less, images and font awesome into it. Then it compresses all of the css and js.
bpm -jcix bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps only js, css, and images into it. Then it compresses all of the css and js.
bpm -x -v ./variables.less bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, images and less files into it. Then it replaces the existing variables.less file with the custom one and compresses all of the css and js.
bpm --bootstrap-version 2.1.0 bootstrap
Creates a new folder in the current working directory named "bootstrap", gets version 2.1.0 of bootstrap and dumps only js, css, less, and images into it.
FAQs
A simple command line interface for installing and compiling Twitter Bootstrap.
We found that bootstrap-package-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.