Repo brief: twbs/bootstrap

Generated by RepoPilot · document generated 2026-09-16 · concise human review Evidence snapshot · analyzed 2026-09-16T09:54:57.383Z · commit b66d3437bdb8

Verdict

Healthy — Healthy across all four use cases

• Last commit 1d ago
• 10 active contributors
• MIT licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

Bootstrap is the world's most widely-used HTML/CSS/JavaScript framework for building responsive, mobile-first web interfaces. It provides a comprehensive library of pre-built components (buttons, navbars, cards, modals, grids) and a utility-first CSS system, eliminating the need to write boilerplate styles. The repo distributes compiled CSS/JS artifacts alongside SCSS source files for customization. Monolithic structure: scss/ contains source styles partitioned by component type; dist/ holds compiled CSS (standard, RTL, minified variants) and JavaScript bundles (UMD, ESM, bundled); build/ contains build scripts (Rollup, Sass compilation, PostCSS RTL transformation, version…

Start here

Open these first:

• js/index.esm.js — Main ES module entry point that exports all Bootstrap JavaScript components and utilities.
• build/rollup.config.mjs — Rollup configuration that orchestrates the build pipeline for CSS, JavaScript, and distribution artifacts.
• scss/bootstrap.scss — Primary SCSS entry point that imports and compiles all Bootstrap styles and customization framework.
• js/src/index.esm.js — Source-level JavaScript entry point defining component exports and API surface before transpilation.
• build/postcss.config.mjs — PostCSS configuration that handles CSS optimization, vendor prefixing, and RTL stylesheet generation.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/twbs/bootstrap.git
cd bootstrap
npm install
npm start

The start script concurrently runs watch tasks and a local documentation server (uses npm-run-all).

Daily commands:

• Development watch mode: npm start (compiles Sass, serves docs with live reload)
• CSS only: npm run css (full pipeline: compile → prefix → RTL → minify)
• JavaScript only: npm run js (bundles via Rollup)
• Linting: npm run css-lint (Stylelint + custom variable checks)
• Tests: npm run js-test (inferred from CI badge; verify exact command in package.json)

Key cautions & unknowns

• Scorecard: known vulnerabilities detected (scored 0/10 by OpenSSF)
• Concentrated ownership — top contributor handles 54% of recent commits
• Build environment: Requires Node.js and npm; Sass compilation is I/O-heavy. RTL generation: CSS RTL variant created via PostCSS plugin (not simple file duplication); custom RTL-aware properties needed. **CSS…
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.