
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
The most popular front-end framework for developing responsive, mobile first projects on the web.
Bootstrap is a sleek, intuitive, and powerful front-end framework for faster and easier web development, created by Mark Otto and Jacob Thornton, and maintained by the core team with the massive support and involvement of the community.
To get started, check out http://getbootstrap.com!
Several quick start options are available:
git clone https://github.com/twbs/bootstrap.git.bower install bootstrap.npm install bootstrap.meteor add twbs:bootstrap.composer require twbs/bootstrap.Read the Getting started page for information on the framework contents, templates and examples, and more.
Within the download you'll find the following directories and files, logically grouping common assets and providing both compiled and minified variations. You'll see something like this:
bootstrap/
βββ css/
β βββ bootstrap.css
β βββ bootstrap.css.map
β βββ bootstrap.min.css
β βββ bootstrap-theme.css
β βββ bootstrap-theme.css.map
β βββ bootstrap-theme.min.css
βββ js/
β βββ bootstrap.js
β βββ bootstrap.min.js
βββ fonts/
βββ glyphicons-halflings-regular.eot
βββ glyphicons-halflings-regular.svg
βββ glyphicons-halflings-regular.ttf
βββ glyphicons-halflings-regular.woff
βββ glyphicons-halflings-regular.woff2
We provide compiled CSS and JS (bootstrap.*), as well as compiled and minified CSS and JS (bootstrap.min.*). CSS source maps (bootstrap.*.map) are available for use with certain browsers' developer tools. Fonts from Glyphicons are included, as is the optional Bootstrap theme.
Have a bug or a feature request? Please first read the issue guidelines and search for existing and closed issues. If your problem or idea is not addressed yet, please open a new issue.
Bootstrap's documentation, included in this repo in the root directory, is built with Jekyll and publicly hosted on GitHub Pages at http://getbootstrap.com. The docs may also be run locally.
gem install rouge./bootstrap directory, run jekyll serve in the command line.Learn more about using Jekyll by reading its documentation.
Documentation for v2.3.2 has been made available for the time being at http://getbootstrap.com/2.3.2/ while folks transition to Bootstrap 3.
Previous releases and their documentation are also available for download.
Please read through our contributing guidelines. Included are directions for opening issues, coding standards, and notes on development.
Moreover, if your pull request contains JavaScript patches or features, you must include relevant unit tests. All HTML and CSS should conform to the Code Guide, maintained by Mark Otto.
Editor preferences are available in the editor config for easy use in common text editors. Read more and download plugins at http://editorconfig.org.
Get updates on Bootstrap's development and chat with the project maintainers and community members.
irc.freenode.net server, in the ##bootstrap channel.twitter-bootstrap-3).bootstrap on packages which modify or add to the functionality of Bootstrap when distributing through npm or similar delivery mechanisms for maximum discoverability.For transparency into our release cycle and in striving to maintain backward compatibility, Bootstrap is maintained under the Semantic Versioning guidelines. Sometimes we screw up, but we'll adhere to those rules whenever possible.
Mark Otto
Jacob Thornton
Code and documentation copyright 2011-2015 Twitter, Inc. Code released under the MIT license. Docs released under Creative Commons.
FAQs
The most popular front-end framework for developing responsive, mobile first projects on the web.
The npm package bootstrap3 receives a total of 3,069 weekly downloads. As such, bootstrap3 popularity was classified as popular.
We found that bootstrap3 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.