Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
此仓库尚在内部测试阶段,请谨慎使用
git flow 是一种有效的分支管理方式,本仓库针对主流 git flow 工作,稍微修改,定制了一套自己的git操作工作流和简化的api
npm install -g @asman/fl
or
yarn global add @asman/fl
主分支,受保护,不可直接操作提交
开发分支
每个 feature 分支从 develop 检出, 开发完成合并进 develop 分支, 并自删除
用线上版本热修复,从 master 检出,开发完成后合并进 develop 分支和 master 分支, 并打 tag
发布分支,用于测试阶段,从 develop 分支检出,启动后进入测试阶段,锁定分支,独立开发,进行bugfixed, 完成后合并进 develop 分支和 master 分支, 并打 tag
fl -i // git flow init
git flow 环境初始化, 会创建 master 分支 和 develop 分支并 push -u
到远程源
fl -f xxx // git flow feature start xxx
分支名为 feature/xxx
, 并 push -u
到远程源
fl -r // git flow release start <version>
根据 pakcage.json
中的 version 字段创建 release 分支, 分支名如 feature/1.0.2
, 并 push -u
到远程源
fl --hotfix // git flow feature start <patchVersion>
从 master 创建 hotfix 分支, 分支名根据 master分支 package.json的version和当前时间戳生成,如 hotfix/1.0.2-patch-1546055248487
, 同时同步修改package.json
中的version字段, 并 push -u
到远程源
fl --finish // git flow <type> finish xxx
根据当前分支判断进行特定分支 finish 行为:
version
的tag, 并同时删除本地和远程分支, 切换回master分支patchVersion
的tag, 并同时删除本地和远程分支, 切换回 master分支fl -h
FAQs
小牛哥 git-flow工作流简化工具
The npm package @asman/fl receives a total of 6 weekly downloads. As such, @asman/fl popularity was classified as not popular.
We found that @asman/fl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.