{"id":13661238,"url":"https://github.com/charto/cbuild","last_synced_at":"2026-03-07T11:02:18.329Z","repository":{"id":57195214,"uuid":"55703915","full_name":"charto/cbuild","owner":"charto","description":"Use SystemJS with npm instead of jspm","archived":false,"fork":false,"pushed_at":"2018-01-28T17:16:10.000Z","size":60,"stargazers_count":25,"open_issues_count":2,"forks_count":1,"subscribers_count":6,"default_branch":"master","last_synced_at":"2025-09-13T21:53:21.314Z","etag":null,"topics":["nodejs","systemjs"],"latest_commit_sha":null,"homepage":null,"language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/charto.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-04-07T15:01:47.000Z","updated_at":"2019-11-26T21:49:57.000Z","dependencies_parsed_at":"2022-09-16T05:21:00.476Z","dependency_job_id":null,"html_url":"https://github.com/charto/cbuild","commit_stats":null,"previous_names":[],"tags_count":15,"template":false,"template_full_name":null,"purl":"pkg:github/charto/cbuild","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/charto%2Fcbuild","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/charto%2Fcbuild/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/charto%2Fcbuild/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/charto%2Fcbuild/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/charto","download_url":"https://codeload.github.com/charto/cbuild/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/charto%2Fcbuild/sbom","scorecard":{"id":274703,"data":{"date":"2025-08-11","repo":{"name":"github.com/charto/cbuild","commit":"0929b6017bda1a958e9c3519e74adaf4be5fe7a3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.5,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"SAST","score":0,"reason":"no SAST tool detected","details":["Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-17T14:09:27.212Z","repository_id":57195214,"created_at":"2025-08-17T14:09:27.212Z","updated_at":"2025-08-17T14:09:27.212Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30212103,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T09:02:10.694Z","status":"ssl_error","status_checked_at":"2026-03-07T09:02:08.429Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["nodejs","systemjs"],"created_at":"2024-08-02T05:01:31.412Z","updated_at":"2026-03-07T11:02:18.313Z","avatar_url":"https://github.com/charto.png","language":"TypeScript","funding_links":[],"categories":["TypeScript"],"sub_categories":[],"readme":"![cbuild](doc/logo.png)\n\n[![build status](https://travis-ci.org/charto/cbuild.svg?branch=master)](http://travis-ci.org/charto/cbuild)\n[![dependency status](https://david-dm.org/charto/cbuild.svg)](https://david-dm.org/charto/cbuild)\n[![npm version](https://img.shields.io/npm/v/cbuild.svg)](https://www.npmjs.com/package/cbuild)\n\n`cbuild` allows publishing leaner [SystemJS](https://github.com/systemjs/systemjs)-based apps and packages\nrunning without build tools.\n`npm` itself can pull all required frontend and backend dependencies.\n\nNormally you would use `jspm` which also users of your package must install.\nIt's very powerful but has some drawbacks if plain `npm` is enough for your use case:\n\n- `jspm` pulls another over 90 packages and 15 megabytes of code with it.\n- ... downloads another separate copy of all required Node.js modules into a different directory structure.\n- ... involves a large `config.js`, parts of which are manually edited (so belong to version control)\n  and other parts autogenerated from `package.json` fields (so preferably omitted from version control).\n\n`cbuild` instead uses Node.js module resolution to find packages installed using `npm` without additional configuration.\nOnly the manually edited parts are needed in `config.js`.\n\nHow does it work?\n-----------------\n\n`cbuild` simply passes your SystemJS `config.js` to [`systemjs-builder`](https://github.com/systemjs/builder),\nwhich bundles your main JavaScript file with its dependencies.\n`cbuild` adds a hook to look up any missing files using [`browser-resolve`](https://github.com/defunctzombie/node-browser-resolve).\n\nThat means you can still use `jspm` as before but you don't have to reinstall all your npm packages with it,\nbecause `cbuild` also automatically looks inside `node_modules`.\nSimple package deduplication is natively handled by `npm@3` or the `dedupe` command in `npm@2`.\n\nFor more complicated scenarios, the full power of SystemJS is still available for loading and bundling.\n\n`cbuild` supports the `browser` field in `package.json`.\nIt can also generate a minimal `config.js` for SystemJS to load packages without having to bundle them.\n\nUsage\n-----\n\nAdd in the `scripts` section of your `package.json`:\n\n```json\n  \"scripts\": {\n    \"cbuild\": \"cbuild\"\n  }\n```\n\nThen run the commands:\n\n```bash\nnpm install --save-dev cbuild\nnpm run cbuild -- -o bundle.js\n```\n\nThis generates a new file `bundle.js` with all code required to load the file\ndefined in the `browser` (or `main` if `browser` is missing) field of `package.json`.\nYou can also set the file on the command line with the `--source` option.\n\nRun `npm run cbuild -- --help` to see the command line options:\n\n```\n  Usage: cbuild [options]\n\n  SystemJS node module bundling tool\n\n  Options:\n\n    -V, --version                output the version number\n    -b, --builder-config \u003cfile\u003e  specify SystemJS builder configuration file\n    -d, --debug [flag]           use development environment\n    -m, --map \u003cpackage\u003e          add package to mappings\n    -s, --source \u003cfile\u003e          main JavaScript source to bundle\n    -p, --package \u003cpath\u003e         directory with package.json and config.js\n    -o, --out \u003cfile\u003e             write output bundle to file\n    -C, --out-config \u003cfile\u003e      write path mappings to new config file\n    -I, --include-config \u003cfile\u003e  merge another file into new config file\n    -q, --quiet [flag]           suppress terminal output\n    -v, --verbose [flag]         print dependency tree of bundled files\n    -x, --static [flag]          create static (sfx) bundle\n    -h, --help                   output usage information\n```\n\nThe `--builder-config` option accepts a JSON file containing\n[SystemJS builder bundle options](https://github.com/systemjs/builder/blob/master/docs/api.md#bundle-options) and\n[SystemJS configuration options](https://github.com/systemjs/systemjs/blob/master/docs/config-api.md#configuration-api)\nstructured like:\n\n```JavaScript\n{\n\t// Bundle options, for example:\n\t\"minify\": true,\n\n\t\"config\": {\n\t\t// Configuration options, for example:\n\t\t\"buildCSS\": false\n\t}\n}\n```\n\nAPI\n===\nDocs generated using [`docts`](https://github.com/charto/docts)\n\u003e\n\u003e \u003ca name=\"api-Branch\"\u003e\u003c/a\u003e\n\u003e ### Interface [`Branch`](#api-Branch)\n\u003e \u003cem\u003eDependency tree branch, used for makeTree() output.\u003c/em\u003e  \n\u003e Source code: [`\u003c\u003e`](http://github.com/charto/cbuild/blob/77b2a6f/src/cbuild.ts#L222-L225)  \n\u003e  \n\u003e Properties:  \n\u003e \u003e **.0**\u003csub\u003e?\u003c/sub\u003e \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eFile name.\u003c/em\u003e  \n\u003e\n\u003e \u003ca name=\"api-BuildItem\"\u003e\u003c/a\u003e\n\u003e ### Interface [`BuildItem`](#api-BuildItem)\n\u003e \u003cem\u003esystemjs-builder diagnostics for a single input file.\u003c/em\u003e  \n\u003e Source code: [`\u003c\u003e`](http://github.com/charto/cbuild/blob/50a7bec/src/typings-custom.d.ts#L10-L27)  \n\u003e  \n\u003e Properties:  \n\u003e \u003e **.name** \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.path** \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.metadata** \u003csup\u003e\u003ccode\u003e{ [key: string]: any; }\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.deps** \u003csup\u003e\u003ccode\u003estring[]\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eList of imports.\u003c/em\u003e  \n\u003e \u003e **.depMap** \u003csup\u003e\u003ccode\u003e{ [name: string]: string; }\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eTable mapping imports to their paths inside the bundle.\u003c/em\u003e  \n\u003e \u003e **.source** \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.fresh** \u003csup\u003e\u003ccode\u003eboolean\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.timestamp** \u003csup\u003e\u003ccode\u003enumber\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.configHash** \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.runtimePlugin** \u003csup\u003e\u003ccode\u003eboolean\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.pluginConfig** \u003csup\u003e\u003ccode\u003eany\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.packageConfig** \u003csup\u003e\u003ccode\u003eany\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.isPackageConfig** \u003csup\u003e\u003ccode\u003eany\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.deferredImports** \u003csup\u003e\u003ccode\u003eany\u003c/code\u003e\u003c/sup\u003e  \n\u003e\n\u003e \u003ca name=\"api-BuildOptions\"\u003e\u003c/a\u003e\n\u003e ### Interface [`BuildOptions`](#api-BuildOptions)\n\u003e \u003cem\u003eOptions object for the build function.\u003c/em\u003e  \n\u003e Source code: [`\u003c\u003e`](http://github.com/charto/cbuild/blob/77b2a6f/src/cbuild.ts#L13-L31)  \n\u003e  \n\u003e Properties:  \n\u003e \u003e **.debug**\u003csub\u003e?\u003c/sub\u003e \u003csup\u003e\u003ccode\u003eboolean\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eIf true, set NODE_ENV to development.\u003c/em\u003e  \n\u003e \u003e **.sfx**\u003csub\u003e?\u003c/sub\u003e \u003csup\u003e\u003ccode\u003eboolean\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eIf true, create static (sfx) bundle.\u003c/em\u003e  \n\u003e \u003e **.bundlePath**\u003csub\u003e?\u003c/sub\u003e \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eBundled file to output.\u003c/em\u003e  \n\u003e \u003e **.sourcePath**\u003csub\u003e?\u003c/sub\u003e \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eMain source file to bundle.\u003c/em\u003e  \n\u003e \u003e **.outConfigPath**\u003csub\u003e?\u003c/sub\u003e \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eOutput config mapping other package names to their main source files.\u003c/em\u003e  \n\u003e \u003e **.mapPackages**\u003csub\u003e?\u003c/sub\u003e \u003csup\u003e\u003ccode\u003estring[]\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eMap additional packages in output config.\u003c/em\u003e  \n\u003e\n\u003e \u003ca name=\"api-BuildResult\"\u003e\u003c/a\u003e\n\u003e ### Interface [`BuildResult`](#api-BuildResult)\n\u003e \u003cem\u003esystemjs-builder diagnostics for the entire bundle.\u003c/em\u003e  \n\u003e Source code: [`\u003c\u003e`](http://github.com/charto/cbuild/blob/50a7bec/src/typings-custom.d.ts#L31-L43)  \n\u003e  \n\u003e Properties:  \n\u003e \u003e **.source** \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eBundled output file contents.\u003c/em\u003e  \n\u003e \u003e **.sourceMap** \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.modules** \u003csup\u003e\u003ccode\u003estring[]\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eList of bundled files.\u003c/em\u003e  \n\u003e \u003e **.entryPoints** \u003csup\u003e\u003ccode\u003estring[]\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eList of files intended to be imported from the bundle(?).\u003c/em\u003e  \n\u003e \u003e **.tree** \u003csup\u003e\u003ccode\u003e{ [path: string]: BuildItem; }\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e **.assetList** \u003csup\u003e\u003ccode\u003eany\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u003cem\u003eOther non-JavaScript files included in the bundle.\u003c/em\u003e  \n\u003e \u003e **.bundleName** \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e\n\u003e \u003ca name=\"api-build\"\u003e\u003c/a\u003e\n\u003e ### Function [`build`](#api-build)\n\u003e \u003cem\u003eBundle files from package in basePath according to options.\u003c/em\u003e  \n\u003e Source code: [`\u003c\u003e`](http://github.com/charto/cbuild/blob/77b2a6f/src/cbuild.ts#L98-L218)  \n\u003e \u003e **build( )** \u003csup\u003e\u0026rArr; \u003ccode\u003eBluebird\u0026lt;[BuildResult](#api-BuildResult)\u0026gt;\u003c/code\u003e\u003c/sup\u003e [`\u003c\u003e`](http://github.com/charto/cbuild/blob/77b2a6f/src/cbuild.ts#L98-L218)  \n\u003e \u003e \u0026emsp;\u0026#x25aa; basePath \u003csup\u003e\u003ccode\u003estring\u003c/code\u003e\u003c/sup\u003e  \n\u003e \u003e \u0026emsp;\u0026#x25ab; options\u003csub\u003e?\u003c/sub\u003e \u003csup\u003e\u003ccode\u003e[BuildOptions](#api-BuildOptions)\u003c/code\u003e\u003c/sup\u003e  \n\u003e\n\u003e \u003ca name=\"api-makeTree\"\u003e\u003c/a\u003e\n\u003e ### Function [`makeTree`](#api-makeTree)\n\u003e \u003cem\u003eExtract a dependency tree from the build function result object.\u003c/em\u003e  \n\u003e \u003cem\u003eReturns a nameless root item.\u003c/em\u003e  \n\u003e \u003cem\u003eEach item is a list of a file name and its child items.\u003c/em\u003e  \n\u003e \u003cem\u003eUses Breadth-First Search to print shortest import chain to each file.\u003c/em\u003e  \n\u003e Source code: [`\u003c\u003e`](http://github.com/charto/cbuild/blob/77b2a6f/src/cbuild.ts#L232-L279)  \n\u003e \u003e **makeTree( )** \u003csup\u003e\u0026rArr; \u003ccode\u003e[Branch](#api-Branch)\u003c/code\u003e\u003c/sup\u003e [`\u003c\u003e`](http://github.com/charto/cbuild/blob/77b2a6f/src/cbuild.ts#L232-L279)  \n\u003e \u003e \u0026emsp;\u0026#x25aa; result \u003csup\u003e\u003ccode\u003e[BuildResult](#api-BuildResult)\u003c/code\u003e\u003c/sup\u003e  \n\nLicense\n=======\n\n[The MIT License](https://raw.githubusercontent.com/charto/cbuild/master/LICENSE)\n\nCopyright (c) 2016-2018 BusFaster Ltd\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcharto%2Fcbuild","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcharto%2Fcbuild","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcharto%2Fcbuild/lists"}