
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
bower-glob-resolver
Advanced tools
A resolver plugin for Bower which enables the use of multiple bower.json files which are found using a glob pattern.
A resolver plugin for Bower which enables the use of multiple bower.json
files which are found using a glob pattern. This is useful for codebases which contain multiple packages or have dependencies which are not installed using Bower.
This is a Node.js module available through the npm registry. Before installing, download and install Node.js. Node.js 8 or higher is required.
Installation is done using the npm install command:
$ npm install --save-dev bower-glob-resolver
After installing this package you will need create or amend Bower's .bowerrc
configuration file to declare the newly installed resolver:
{
"resolvers": [
+ "bower-glob-resolver"
]
}
This resolver will be used whenever a dependency's source begins with glob:
. The value after this prefix must be a valid glob pattern ending with bower.json
.
For example, a project containing multiple components may have this folder structure:
my-project/
├── components/
│ ├── footer/
│ │ └── bower.json
│ └── header/
│ └── bower.json
├── .bowerrc
└── bower.json
To install all of the Bower dependencies for every component in the project a new dependency must be added to the root bower.json
file (the name doesn't matter so long as it is unique!) The source of this dependency should be a glob pattern matching the component's bower.json
:
{
"dependencies": {
"my-components": "glob:components/*/bower.json"
}
}
When running bower install
this resolver will log each extra bower.json
file it finds and uses:
$ bower install
> bower my-components#* glob-resolver Adding dependency on /my-project/components/footer/bower.json
> bower my-components#* glob-resolver Adding dependency on /my-project/components/header/bower.json
This resolver works by creating a temporary package which has dependencies on all of the packages matched by the glob pattern.
This package is MIT licensed.
FAQs
A resolver plugin for Bower which enables the use of multiple bower.json files which are found using a glob pattern.
The npm package bower-glob-resolver receives a total of 6 weekly downloads. As such, bower-glob-resolver popularity was classified as not popular.
We found that bower-glob-resolver demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.