
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Taking the pain out of front-end build systems
Ever feel like existing front-end build systems just get in your way? Say hello to Bygg. The basic primitive isn't a single file, but a tree of files, and you simply compose plugins into a graph that defines your build pipeline. Bygg takes care of the rest. By leveraging functional reactive programming only the part of the pipeline that actually changed is recomputed, and you'll see the result in your browser just milliseconds later. No need to worry about live-reload, source maps, or bending your build system to fit revving into the picture; Bygg's got you covered.
Check out the examples to get started.
byggfile.js
This file is just a quick sample to give you a taste of what Bygg does.
var bygg = require('bygg');
var autoprefixer = require('bygg-plugins/autoprefixer');
var csswring = require('bygg-plugins/csswring');
var rev = require('bygg-plugins/rev');
var serve = require('bygg-plugins/serve');
var stats = require('bygg-plugins/stats');
var uglify = require('bygg-plugins/uglify');
bygg.task('serve', function (optimize) {
return build(optimize)
.pipe(bygg.write('build/'))
.pipe(serve(3000));
}, [{ name: 'optimize', default: false, flag: true, abbr: 'o' }]);
bygg.task('build', function (optimize) {
return build(optimize)
.pipe(bygg.write('build/'))
.pipe(stats());
}, [{ name: 'optimize', default: true, flag: true, abbr: 'o' }]);
var build = function (optimize) {
var html = bygg.files('*.html');
var styles = bygg
.files('app.css')
.pipe(autoprefixer('last 2 versions', 'ie 9'))
.pipe(optimize ? csswring() : bygg.noop());
var scripts = bygg
.files('app.js')
.pipe(optimize ? uglify() : bygg.noop());
return bygg.combine(
html,
styles,
scripts
)
.pipe(optimize ? rev() : bygg.noop());
};
FAQs
Taking the pain out of front-end build systems
The npm package bygg receives a total of 6 weekly downloads. As such, bygg popularity was classified as not popular.
We found that bygg demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.