
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
tools-monorepo
Advanced tools
Bernier LLC Tools Monorepo - Collection of reusable packages for modern web applications
This repository contains a collection of reusable, production-grade packages for modern web applications, maintained by Bernier LLC. It is organized as a monorepo using npm workspaces for scalable, maintainable multi-package development.
packages/<name>/ and is published independently to npm under the @bernierllc/ scope.# Install all dependencies (from the repo root)
npm install --legacy-peer-deps
Important: Always run npm install from the root directory, never from individual package folders. See Contributing Guidelines for more details.
package.json for direct dependencies and peerDependencies.Common scripts:
npm run build # Build all packages
npm test # Run all tests
npm run lint # Lint all packages
npm run type-check # Type-check all packages
For the easiest publishing experience, use our development CLI:
# From the root directory
npx development-cli publish
# Or if you have the CLI installed globally
development-cli publish
This will:
The development CLI is the future of our publishing workflow!
Until the development CLI is fully implemented, you can use our legacy interactive script:
node scripts/publish.js
Note: This script is deprecated and will be removed once the development CLI is complete.
If you prefer to use the manual workflow:
Create a changeset for the package you want to publish:
npx changeset
Commit the changeset:
git add .changeset/*
git commit -m "chore: add changeset for <package>"
Update versions and changelogs:
npx changeset version
git add .
git commit -m "chore(release): version packages"
Publish to npm:
npm run publish:all
If any step fails, the publish is aborted.
Note: The manual workflow is being phased out in favor of the development CLI.
For detailed information about the publishing workflow, see: docs/deployment-with-changesets.md
This repo uses npm workspaces for scalable, maintainable multi-package development. All dependencies (including devDependencies) are hoisted to the root. Always run npm install from the root directory.
All packages are now standardized on React 19.1.0. As of July 2024, some testing libraries (notably @testing-library/react) do not yet officially support React 19 in their peerDependencies. To work around this, we use:
npm install --legacy-peer-deps
This allows npm to install all dependencies despite the peer conflict. This is a safe, temporary workaround until official support is released. Monitor for updates and upgrade Testing Library when React 19 support is available.
For detailed contributing guidelines, see: CONTRIBUTING.md
ISC License - see LICENSE file for details. # Enhanced Pre-commit Hook
FAQs
Bernier LLC Tools Monorepo - Collection of reusable packages for modern web applications
We found that tools-monorepo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.