Package Health Score

55 / 100

security
Security review needed
popularity
Small
maintenance
Inactive
community
Active

Security

Security review needed

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version				Vulnerabilities	License Risk
1.0.5-beta	\|	04/2015	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Small

Weekly Downloads (2)

GitHub Stars: 14.96K
Forks: 1.84K
Contributors: 210

Direct Usage Popularity

The npm package bower-art receives a total of 2 downloads a week. As such, we scored bower-art popularity level to be Small.

Based on project statistics from the GitHub repository for the npm package bower-art, we found that it has been starred 14,961 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active

Readme.md: Yes
Contributing.md: Yes
Code of Conduct: No
Contributors: 210
Funding: Yes

A good and healthy external contribution signal for bower-art project, which invites more than one hundred open source maintainers to collaborate on the repository.

We found a way for you to contribute to the project! Looks like bower-art is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Inactive

Commit Frequency

Open Issues: 8
Open PR: 4
Last Release: 10 years ago
Last Commit: 2 months ago

Further analysis of the maintenance status of bower-art based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for bower-art is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: >=0.10.0

Age: 10 years
Dependencies: 41 Direct
Versions: 3
Install Size: 0 B
Dist-tags: 1
# of Files: 0
Maintainers: 1
TS Typings: No

bower-art has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

Bower

> A package manager for the web

Bower offers a generic, unopinionated solution to the problem of front-end package management, while exposing the package dependency model via an API that can be consumed by a more opinionated build stack. There are no system wide dependencies, no dependencies are shared between different apps, and the dependency tree is flat.

Bower runs over Git, and is package-agnostic. A packaged component can be made up of any type of asset, and use any type of transport (e.g., AMD, CommonJS, etc.).

View complete docs on bower.io

View all packages available through Bower's registry.

Install

$ npm install -g bower

Bower depends on Node.js and npm. Also make sure that git is installed as some bower packages require it to be fetched and installed.

Usage

See complete command line reference at bower.io/docs/api/

Installing packages and dependencies

# install dependencies listed in bower.json
$ bower install

# install a package and add it to bower.json
$ bower install  --save

# install specific version of a package and add it to bower.json
$ bower install # --save

Using packages

We discourage using bower components statically for performance and security reasons (if component has an upload.php file that is not ignored, that can be easily exploited to do malicious stuff).

The best approach is to process components installed by bower with build tool (like Grunt or gulp), and serve them concatenated or using module loader (like RequireJS).

Uninstalling packages

To uninstall a locally installed package:

$ bower uninstall

prezto and oh-my-zsh users

On prezto or oh-my-zsh, do not forget to alias bower='noglob bower' or bower install jquery\#1.9.1

Running commands with sudo

Bower is a user command, there is no need to execute it with superuser permissions. However, if you still want to run commands with sudo, use --allow-root option.

Windows users

To use Bower on Windows, you must install msysgit correctly. Be sure to check the option shown below:

msysgit

Note that if you use TortoiseGit and if Bower keeps asking for your SSH password, you should add the following environment variable: GIT_SSH - C:\Program Files\TortoiseGit\bin\TortoisePlink.exe. Adjust the TortoisePlink path if needed.

Configuration

Bower can be configured using JSON in a .bowerrc file. Read over available options at bower.io/docs/config.

Completion (experimental)

NOTE: Completion is still not implemented for the 1.0.0 release

Bower now has an experimental completion command that is based on, and works similarly to the npm completion. It is not available for Windows users.

This command will output a Bash / ZSH script to put into your ~/.bashrc, ~/.bash_profile, or ~/.zshrc file.

$ bower completion &gt;&gt; ~/.bash_profile

Support

StackOverflow
Mailinglist - twitter-bower@googlegroups.com
#bower on Freenode

Contributing

We welcome contributions of all kinds from anyone. Please take a moment to review the guidelines for contributing.

Note that on Windows for tests to pass you need to configure Git before cloning:

git config --global core.autocrlf input

Bower Team

Bower is made by lots of people across the globe, contributions large and small. Our thanks to everyone who has played a part.

Core team

Bower Alumni

License

Licensed under the MIT License

bower-art development dependencies

chai nock grunt mocha istanbul coveralls expect.js grunt-cli multiline node-uuid grunt-exec proxyquire load-grunt-tasks grunt-simple-mocha grunt-contrib-watch grunt-contrib-jshint

FAQs

What is bower-art?

The browser package manager. Visit Snyk Advisor to see a full health score report for bower-art, including popularity, security, maintenance & community analysis.

Is bower-art popular?

The npm package bower-art receives a total of 2 weekly downloads. As such, bower-art popularity was classified as small. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is bower-art well maintained?

We found indications that bower-art is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is bower-art safe to use?

While scanning the latest version of bower-art, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 10 December-2024, at 09:13 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

Package Health Score

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (2)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Readme

Bower

Install

Usage

Installing packages and dependencies

Using packages

Uninstalling packages

prezto and oh-my-zsh users

Running commands with sudo

Windows users

Configuration

Completion (experimental)

Support

Contributing

Bower Team

Core team

Bower Alumni

License

bower-art dependencies

bower-art development dependencies

FAQs

What is bower-art?

Is bower-art popular?

Is bower-art well maintained?

Is bower-art safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues