
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@bfra.me/semantic-release
Advanced tools
Comprehensive TypeScript-first semantic-release configuration with type safety, validation, and modern development patterns.
# npm
npm install --save-dev @bfra.me/semantic-release semantic-release
# pnpm
pnpm add --save-dev @bfra.me/semantic-release semantic-release
# yarn
yarn add --dev @bfra.me/semantic-release semantic-release
// release.config.ts
import { defineConfig } from '@bfra.me/semantic-release'
export default defineConfig({
branches: ['main'],
plugins: [
'@semantic-release/commit-analyzer',
'@semantic-release/release-notes-generator',
'@semantic-release/changelog',
'@semantic-release/npm',
'@semantic-release/github',
'@semantic-release/git',
],
})
// NPM package preset
import { npmPreset } from '@bfra.me/semantic-release'
export default npmPreset({
branches: ['main', { name: 'beta', prerelease: true }],
repositoryUrl: 'https://github.com/user/package'
})
// Fluent API for complex configurations
import { createConfigBuilder } from '@bfra.me/semantic-release/builder'
export default createConfigBuilder()
.branches(['main', 'beta'])
.plugins()
.commitAnalyzer()
.releaseNotesGenerator()
.changelog()
.npm()
.github()
.git()
.build()
defineConfig() - Main configuration function with validation and type safetycreateConfigBuilder() - Fluent API builder patterncreateConfig() - Factory function for JavaScript configurationsnpmPreset() - Complete npm package workflowgithubPreset() - GitHub releases onlymonorepoPreset() - Monorepo-aware configurationdevelopmentPreset() - Development and pre-release workflowsmergeConfigs() - Merge multiple configurationsextendConfig() - Extend base configurationsoverrideConfig() - Override specific optionsvalidateConfig() - Runtime configuration validationvalidateCompleteConfig() - Comprehensive validation with pluginsFull TypeScript definitions are provided for:
Code editors with TypeScript support will provide IntelliSense, error checking, and auto-completion for all configuration options.
FAQs
Semantic Release shareable configuration and plugins for bfra.me.
We found that @bfra.me/semantic-release demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.