
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Integrate bower and bundler, by making bower aware of gem bundles.
NOTE:
Add this line to your application's Gemfile:
gem 'bowndler'
And then execute:
$ bundle
Or install it yourself as:
$ gem install bowndler
"my_gem": "<%= gem_path('my_gem') %>"
to "paths" in the bower.json.erb, for any gem that has its own bower.jsonbower <command>
, run bowndler <command>
and bowndler will make sure the bower.json is up to date. e.g. bowndler install
bowndler update
bower cache clean
firstbower_components
directory and try againBowndler has a somewhat magical "autohook" feature - where bowndler update
will run automatically whenever you run a bundle
command that could potentially change your Gemfile.lock
. This is VERY experimental, and should be used with caution.
To enable it:
bowndler autohook
in the root of your repo. This will modiy your Gemfile, those changes should be committed to source control.ENABLE_BOWNDLER_HOOK=1
in your environment (by adding export ENABLE_BOWNDLER_HOOK=1
to your .bashrc or .bash_profile)NOTE: Autohook only works reliably on Mac OS X. It currently causes a segfault on both Ruby 1.9.* and 2.* on CentOS (and potentially other Linux distributions as well)
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that bowndler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.