
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
bootstrap-package-manager
Advanced tools
A simple command line interface for installing and compiling Twitter Bootstrap.
This is a simple command line interface for installing and compiling Twitter Bootstrap written in Node.js. It has many options, but the default is to install everything, without compression. It also integrates with a few extra Bootstrap resources, including Font-Awesome and Bootswatch themes.
npm install bootstrap-package-manager -g
bpm [options] <folder>
Both options and folder are optional. folder is the path you want to dump the bootstrap files in and defaults to ./bootstrap. If the directory already exists and isn't empty, bootstrap-package-manager will warn you. Here are available options:
-h, --help : output usage information-V, --version : output the version number-j, --javascript : Add Javascript-c, --css : Add CSS-l, --less : Add Less-i, --img : Add Images-a, --font-awesome : Add Font Awesome-t, --theme <name> : Mixin in a Bootswatch theme. See http://bootswatch.com/ for full list. Compatible with custom variables.less file."-v, --variables <path> : Path to a custom variables.less file to replace the included version.-f, --font-path <path> : Set a custom value for the less variable @FontAwesomePath for a custom css font path when using Font Awesome.-s, --script <paths> : Include javascript files (seperated by commas) with custom runtime instructions. See src/font-awesome.coffee or src/variables.coffee for examples.-x, --compress : Compress JS and CSS and include as an extra *.min.* file.--compress-js : Compress JS with UglifyJs and include as an extra bootstrap.min.js file.--compress-css : Compress CSS with lessc (YUI) and include as an extra *.min.css file.--no-concat : Don't concat Javascript files together. JS compression not available with this option.--bootstrap-version <version> : Specific Bootstrap version to use. See http://github.com/twitter/bootstrap/tags for full list. Default: master; Example: 2.1.0 or v2.1.0--font-awesome-version <version> : Specific Font Awesome version to use. See http://github.com/FortAwesome/Font-Awesome/tags for full list. Default: master; Example: 3.0.0 or v3.0.0The default is to include all javascript, css, images and less unless you include at least one of the options -j, -c, -l, or -i, in which case only those specified are included.
Sometimes, bootstrap-package-manager likes to... fail. This is probably due to a file request or stream failure. If this happens, attempt a few reruns and then if the problem still occurs, submit issue report.
bpm bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, less and images into it.
bpm -ax bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, less, images and font awesome into it. Then it compresses all of the css and js.
bpm -jcix bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps only js, css, and images into it. Then it compresses all of the css and js.
bpm -x -v ./variables.less bootstrap
Creates a new folder in the current working directory named "bootstrap" and dumps js, css, images and less files into it. Then it replaces the existing variables.less file with the custom one and compresses all of the css and js.
bpm --bootstrap-version 2.1.0 bootstrap
Creates a new folder in the current working directory named "bootstrap", gets version 2.1.0 of bootstrap and dumps only js, css, less, and images into it.
FAQs
A simple command line interface for installing and compiling Twitter Bootstrap.
The npm package bootstrap-package-manager receives a total of 15 weekly downloads. As such, bootstrap-package-manager popularity was classified as not popular.
We found that bootstrap-package-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.