New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

@bonvoy/plugin-exec

Package Overview
Dependencies
Maintainers
1
Versions
3
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@bonvoy/plugin-exec

🚢 Execute custom shell commands during release lifecycle

latest
Source
npmnpm
Version
0.12.0
Version published
Maintainers
1
Created
Source

@bonvoy/plugin-exec 🚢

Execute custom shell commands during release lifecycle

Optional plugin for bonvoy that lets you run shell commands at various points in the release process.

Features

  • 🔧 Lifecycle Hooks - Run commands before/after any release phase
  • 🐚 Shell Support - Full shell syntax (pipes, redirects, etc.)
  • 🔍 Dry Run - Commands are skipped in dry-run mode
  • 📝 Logging - Commands are logged before execution

Installation

npm install -D @bonvoy/plugin-exec

Usage

// bonvoy.config.js
export default {
  plugins: [
    ['@bonvoy/plugin-exec', {
      beforePublish: 'npm run build',
      afterRelease: 'echo "Released!" | slack-notify',
    }]
  ]
};

Available Hooks

HookWhen
beforeShipItBefore release starts
afterVersionAfter versions are bumped
beforeChangelogBefore changelog generation
afterChangelogAfter changelog is written
beforePublishBefore npm publish
afterPublishAfter npm publish
beforeReleaseBefore GitHub release
afterReleaseAfter release completes

Examples

Build before publish

export default {
  plugins: [
    ['@bonvoy/plugin-exec', {
      beforePublish: 'npm run build',
    }]
  ]
};

Notify on release

export default {
  plugins: [
    ['@bonvoy/plugin-exec', {
      afterRelease: 'curl -X POST https://hooks.slack.com/... -d "Released!"',
    }]
  ]
};

Multiple commands

export default {
  plugins: [
    ['@bonvoy/plugin-exec', {
      beforePublish: 'npm run lint && npm run build && npm run test',
    }]
  ]
};

License

MIT

Keywords

bonvoy

FAQs

Package last updated on 11 Feb 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts