
Product
Socket Brings Supply Chain Security to skills.sh
Socket is now scanning AI agent skills across multiple languages and ecosystems, detecting malicious behavior before developers install, starting with skills.sh's 60,000+ skills.
grunt-sync-pkg
Advanced tools
Minimalist Grunt plugin to sync only basic properties between package.json and bower.json

Minimalist Grunt plugin to sync only basic properties between package.json and bower.json
This plugin syncs the following properties from package.json to bower.json:
nameversionmainAlso, if a bower.json file does not exist, the plugin creates on first. There is no option to turn this off, since there is no reason to use the plugin if you aren't syncing with anything :-).
If you haven't used grunt before, be sure to check out the Getting Started guide.
From the same directory as your project's Gruntfile and package.json, install this plugin with the following command:
npm install grunt-sync-pkg --save-dev
Once that's done, add this line to your project's Gruntfile:
grunt.loadNpmTasks('grunt-sync-pkg');
If the plugin has been installed correctly, you should now be able to run grunt sync at the command line to run the sync task.
Type: Array
Default: ['name', 'version', 'main']
Properties to sync from package.json to bower.json.
Type: Array
Default: undefined
Properties to exclude from syncing.
In lieu of a formal styleguide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code using grunt.
Jon Schlinkert
Copyright (c) 2013 Jon Schlinkert Released under the MIT License.
FAQs
Minimalist Grunt plugin to sync only basic properties between package.json and bower.json
The npm package grunt-sync-pkg receives a total of 14 weekly downloads. As such, grunt-sync-pkg popularity was classified as not popular.
We found that grunt-sync-pkg demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket is now scanning AI agent skills across multiple languages and ecosystems, detecting malicious behavior before developers install, starting with skills.sh's 60,000+ skills.

Product
Socket now supports PHP with full Composer and Packagist integration, enabling developers to search packages, generate SBOMs, and protect their PHP dependencies from supply chain threats.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.