
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
broccoli-bower
Advanced tools
Proof-of-concept plugin for loading Bower packages into Broccoli.
This is pre-alpha software!
At the moment, it's not well-specified where to pick up source files from
Bower packages. The top level is probably wrong; lib
is often a good guess;
the main
property in bower.json
points at files too. This plugin uses
heuristics to pick the lib
directory and/or main
files, and returns an
array of trees-(hopefully)-containing-the-source-code for each bower package
found.
Because of that, this plugin should be regarded as a pre-alpha proof of concept to demonstrate what might be possible when we combine Bower with a build system sitting on top.
You should not rely on its behavior for your production apps, and you should not rely on its behavior to distribute your libraries.
There will be many cases where the current heuristic results in broken or undesirable behavior. Also, library authors will sometimes update their bower packages, randomly breaking things that previously worked with this plugin. This is acceptable!
Please do not send pull requests to change the behavior, either to this repo, or to other people's bower packages, as fixing one edge case will just open up another.
The way forward is to write a mini spec for a configuration syntax to specify
where in a bower package source files should be picked up, such as { mainDir: 'lib' }
. This configuration might be part of bower.json
, or might live in a
separate file.
npm install --save-dev broccoli-bower
var findBowerTrees = require('broccoli-bower');
var bowerTrees = findBowerTrees();
Then pass bowerTrees
into other plugins to have the files in your bower
packages picked up by them.
0.2.1
FAQs
Broccoli plugin to find installed bower packages
We found that broccoli-bower demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.