Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

libgrabber

Package Overview
Dependencies
Maintainers
3
Versions
30
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

libgrabber

Automatically updates hosted projects on jsDelivr CDN.

  • 0.5.14
  • latest
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
9
increased by28.57%
Maintainers
3
Weekly downloads
 
Created
Source

libgrabber

libgrabber is a bot that runs on jsDelivr's servers to auto-update projects. There are three simple steps to enable auto-updating:

  1. Prepare minified files
  2. Add or update update.json schema at jsDelivr
  3. Create New Package Release

If you are a developer and want to contribute to our bot's code, we also include [instructions](Running your own libgrabber bot) for running the bot locally.

Usage

Prepare minified files

Please upload only minified files on jsDelivr. Smaller files helps users load websites faster. Minified files also helps us with hosting and promotes good practices. If you need to upload images, see if extra compression can make your images smaller. SVG optimizers may also help with SVG files from Inkscape and Illustrator.

Add update.json schema

libgrabber looks for update.json at the root of each project folder. This file tells libgrabber where to check for project updates and which files it should copy to jsDelivr. You add update.json using these steps:

  1. Fork the jsDelivr/jsDelivr repo
  2. Open your project folder. If it doesn't exist, please add a new folder and info.ini file using jsDelivr's file structure.
  3. Write update.json using this format:
{
  "packageManager": "<github|npm|bower>",
  "name": "<package-name>",
  "repo": "<user>/<repo>",
  "files": {
    "basePath": "<dir>",
    "include": ["<glob-string-1>", "<glob-string-2>"],
    "exclude": ["<glob-string-3>"]
  }
}

packageManager (required) (github, npm or bower) - to declare which package manager libgrabber watches for new versions

name (required) - refers to package name on npm or Bower, or repo name when GitHub is used

repo (optional when npm or bower is used) - GitHub repository (for example jsdelivr/libgrabber)

files/basePath (optional) - base directory from which files are copied (for example dist/). Defaults to / (relative to the root directory of unpacked project package).

files/include (optional) - array that specifies files and dirs that will be copied from project package. Accepts one or more glob strings. Defaults to **/*, meaning all files and directories. Useful examples:

  • main.min.js - copies main.min.js file in the base dir
  • *.js - copies javascript files found in the base dir
  • **/*.js - copies javascript files found in the base directory and recursively in all its subdirectories. Directory structure will be retained.
  • dist/*.js - copies javascript files from dist dir. Directory structure will not be retained (e.g. dist dir will be stripped when copied). To retain directory structure prepend glob with ./ e.g. ./vendors/*.js

files/exclude (optional) - array that specifies files and dirs that will be excluded. Format is the same as files/include.

Libgrabber glob functionality is based on node-glob, for more information and examples, please see its documentation.

Tools
Examples
Bootstrap Example (github)

Following example excludes non-minified resources:

{
  "packageManager": "github",
  "name": "bootstrap",
  "repo": "twbs/bootstrap",
  "files": {
    "basePath": "dist/",
    "exclude": ["css/bootstrap.css", "css/bootstrap.css.map", "css/bootstrap-theme.css", "css/bootstrap-theme.css.map", "js/bootstrap.js"]
  }
}
Humane-js (/files/humane.js/update.json) (github)
{
  "packageManager": "github",
  "name": "humane.js",
  "repo": "wavded/humane-js",
  "files": {
    "include": ["humane.min.js", "humane.js", "./themes/**/*"]
  }
}
Lodash Example (npm)
{
  "packageManager": "npm",
  "name": "lodash",
  "repo": "lodash/lodash",
  "files": {
    "basePath": "dist/"
  }
}
midnight.js Example (single-item include array)
{
  "packageManager": "github",
  "name": "jquery.midnight",
  "repo": "Aerolab/midnight.js",
  "files": {
    "include": ["midnight.jquery.min.js"]
  }
}

Create new package release

When libgrabber detects a release with a new SemVer compliant tag, it will automatically update the repo on jsDelivr. The packageManager value you chose in update.json determines where you need to update your actual package.

GitHub Releases

You can use the GitHub web GUI, or from CLI use git-tag to post a new release.

npm

Use npm publish.

Bower

Bower has its own system to register packages, though the package file needs a git host. If GitHub is used, follow the instructions above to let Bower know your package is updated.


Running your own libgrabber bot

It is not required for you to run the bot yourself to update your own project. These instructions are for you to run libgrabber locally for testing.

Configuration
Repo
  1. Properly configured git account (user.name, user.email, ssh key with empty ssh passphrase)
  2. Forked jsdelivr repo
  3. Upstream set to jsdelivr repo
$ git remote add upstream git@github.com:jsdelivr/jsdelivr.git
Libgrabber config
{
  "github-access-token": "<secret>",
  "pull-request-repo": "https://github.com/jsdelivr/jsdelivr",
  "origin-repo": "<forked-repo-https-endpoint>",
  "mention-repo-owner": false,
  "papertrail-url": "<optional>",
  "papertrail-hostname": "<optional>"
}
Running
# --jsdelivr-path <path to the cloned forked repo>
# --config <path to the above mention config file>
# --project <name of project to update, if absent libgrabber will default to updating all projects>
$ libgrabber --jsdelivr-path jsdelivr/ --config jsdelivr/libgrabber.config.json --project projectName

Keywords

FAQs

Package last updated on 01 Nov 2016

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc