
Security News
How Enterprise Security Is Adapting to AI-Accelerated Threats
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.
bower-json
Advanced tools
Read bower.json files with semantics, normalisation, defaults and validation
Read bower.json files with semantics, normalisation, defaults and validation.
Install via npm: npm install --save bower-json
Reads file and applies normalisation, defaults and validation according to the bower.json spec.
If the passed file does not exist, the callback is called with error.code equal to ENOENT.
If the passed file contents are not valid JSON, the callback is called with error.code equal to EMALFORMED.
If the json does not comply with the bower.json spec, the callback is called with error.code equal to EINVALID.
If file is a directory, find() will be used to search for the json file.
The options argument is optional and can be omitted. These options will be passed to parse method.
var bowerJson = require('bower-json');
// Can also be used by simply calling bowerJson()
bowerJson.read('/path/to/bower.json', function (err, json) {
if (err) {
console.error('There was an error reading the file');
console.error(err.message);
return;
}
console.log('JSON: ', json);
});
Parses an object. Useful when you want to apply normalisation and validation directly to an object.
If the json does not comply with the bower.json spec, an error is thrown with error.code equal to EINVALID.
The options arguments is optional and can be omitted. Available options:
truefalsejson object instead of using it directly, defaults to falsevar bowerJson = require('bower-json');
var json = {
name: 'my-package',
version: '0.0.1'
};
try {
bowerJson.parse(json);
} catch (err) {
console.error('There was an error parsing the object');
console.error(err.message);
}
Validates the passed json object.
Returns an object with errors and warnings of this bower.json contents.
var bowerJson = require('bower-json');
var json = {
name: 'myPackage',
version: '0.0.1',
main: {}
};
var issues = bowerJson.getIssues(json);
expect(issues).toEqual({
errors: ['The "main" field has to be either an Array or a String'],
warnings: ['The "name" must be lowercase']
});
#### .validate(json)
Validates the passed `json` object.
Throws an error with `error.code` equal to `EINVALID` if it does not comply with the spec.
```js
var bowerJson = require('bower-json');
var json = {
name: 'myPackage',
version: '0.0.1'
};
try {
bowerJson.validate(json);
} catch (err) {
console.error('There was an error validating the object');
console.error(err.message);
}
var bowerJson = require('bower-json');
var json = {
name: 'my-package',
version: '0.0.1',
main: 'foo.js,bar.js'
};
bowerJson.normalize(json);
json.main // ['foo.js', 'bar.js']
Finds the json filename inside a folder.
Checks if a bower.json exists, falling back to component.json (deprecated) and .bower.json.
If no file was found, the callback is called with a error.code of ENOENT.
var bowerJson = require('bower-json');
bowerJson.find('/path/to/folder', function (err, filename) {
if (err) {
console.error('There is no json file in the folder');
return;
}
console.log('Filename: ', filename);
// Now that we got the filename, we can read its contents
bowerJson.read(filename, function (err, json) {
if (err) {
console.error('There was an error reading the file');
console.error(err.message);
return;
}
console.log('JSON: ', json);
});
});
Released under the MIT License.
FAQs
Read bower.json files with semantics, normalisation, defaults and validation
The npm package bower-json receives a total of 25,939 weekly downloads. As such, bower-json popularity was classified as popular.
We found that bower-json demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.