
Security News
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.
@antmjs/warning
Advanced tools
在 git commit 的时候,获取工作区和暂存区指定的文件 与最后一次提交成功的对比的结果
团队成员对项目关键的配置项、公用组件、公共方法修改了,需要通知开发组成员修改内容,避免影响开发的规范性和统一性
使用前你需要确认安装 husky
yarn add @antmjs/warning -D
emailReceivers、webhooks的配置支持数组和逗号隔开的字符串module.exports = {
warning: {
monitorFiles: [
'package.json',
'./packages/**/package.json', // 支持glob语法
],
branchs: ['master'], // 监听的分支,不设置的话所有的分支都监听
webhooks: {
url: 'https://oapi.dingtalk.com/robot/send?access_token=xxx', // webhooks地址,多个用数组
},
email: {
sender: 'abcd@126.com', // 发送人
senderPass: 'ASDFGHJASD', // 发送令牌,邮箱需要设置SMTP服务获取
receivers: 'xxxxxx@qq.com', // 接收人邮箱,多个用数组
},
},
}
#!/bin/sh
. "$(dirname "$0")/_/husky.sh"
yarn lint-staged
npx antm-warning webhooks
npx antm-warning email
antm-warning webhook 的相关参数
antm-warning webhooks:
-u, --url, <url> set webhooks api of dingding | wechart | Lark | others, separated by commas
-mf, --monitor-files, <monitorFiles> set monitor files
antm-warning email 的相关参数
antm-warning email:
-mf, --monitor-files, <monitorFiles> set monitor files
-sender, --sender, <sender> set the email sender
-sender-pass, --sender-pass, <senderPass> set the email sender pass
-receivers, --receivers, <receivers> set the email receivers, separated by commas
FAQs
指定文件,在git commit提交的时候,将文件更改内容通知到微信、钉钉、飞书等聊天群或者发送到指定的邮箱
We found that @antmjs/warning demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.