New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

@sebbo2002/semantic-release-jsr

Package Overview
Dependencies
Maintainers
1
Versions
112
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@sebbo2002/semantic-release-jsr

Small `semantic-release` plugin, which adjusts the version in the `jsr.json` file and executes `jsr publish` to publish the module on jsr.io as well.

latest
Source
npmnpm
Version
3.2.1
Version published
Weekly downloads
3.2K
32.77%
Maintainers
1
Weekly downloads
 
Created
Source

semantic-release-jsr

License

Small semantic-release plugin, which adjusts the version in the jsr.json file and executes jsr publish to publish the module on jsr.io as well.

📦 Install

# Install via npm
$ npm install -D @sebbo2002/semantic-release-jsr

🔧 Usage

The plugin can be configured in the semantic-release configuration file:

{
    "plugins": [
        "@semantic-release/commit-analyzer",
        "@semantic-release/release-notes-generator",
        "@sebbo2002/semantic-release-jsr"
    ]
}

Please do not forget to set the id-token permission in your GitHub action so that jsr publish can access the OIDC ID token for authentication. Optionally, some options can be passed to the plugin, which are documented here.

⚙️ Steps

StepDescription
verifyConditionsRuns jsr publish --dry-run to test your setup. Also downloads the deno binary if required.
prepareUpdates the jsr.json / deno.json files
publishRun final jsr publish command
fail / successRemove the temporary folder

Copyright (c) Sebastian Pekarek under the MIT license.

FAQs

Package last updated on 04 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts