
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
Taking the pain out of front-end build systems
Ever feel like existing front-end build systems just get in your way? Say hello to Bygg. The basic primitive isn't a single file, but a tree of files, and you simply compose plugins into a graph that defines your build pipeline. Bygg takes care of the rest. By leveraging functional reactive programming only the part of the pipeline that actually changed is recomputed, and you'll see the result in your browser just milliseconds later. No need to worry about live-reload, source maps, or bending your build system to fit revving into the picture; Bygg's got you covered.
Check out the examples to get started.
byggfile.jsThis file is just a quick sample to give you a taste of what Bygg does.
var bygg = require('bygg');
var autoprefixer = require('bygg-plugins/autoprefixer');
var csswring = require('bygg-plugins/csswring');
var rev = require('bygg-plugins/rev');
var serve = require('bygg-plugins/serve');
var stats = require('bygg-plugins/stats');
var uglify = require('bygg-plugins/uglify');
bygg.task('serve', function (optimize) {
return build(optimize)
.pipe(bygg.write('build/'))
.pipe(serve(3000));
}, [{ name: 'optimize', default: false, flag: true, abbr: 'o' }]);
bygg.task('build', function (optimize) {
return build(optimize)
.pipe(bygg.write('build/'))
.pipe(stats());
}, [{ name: 'optimize', default: true, flag: true, abbr: 'o' }]);
var build = function (optimize) {
var html = bygg.files('*.html');
var styles = bygg
.files('app.css')
.pipe(autoprefixer('last 2 versions', 'ie 9'))
.pipe(optimize ? csswring() : bygg.noop());
var scripts = bygg
.files('app.js')
.pipe(optimize ? uglify() : bygg.noop());
return bygg.combine(
html,
styles,
scripts
)
.pipe(optimize ? rev() : bygg.noop());
};
FAQs
Taking the pain out of front-end build systems
We found that bygg demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.