
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@brillout/release-me
Advanced tools
@brillout/release-me
Publish your npm packages.
Used by:
Features
Get started
Usage
Monorepo
[!WARNING] Don't use this: it's only meant for Vike's team & friends. That said, feel free to fork this project.
CHANGELOG.md
.0.4.177-commit-ff3d6cd
.)package.json
and CHANGELOG.md
, enabling you to double check before publishing.Run $ pnpm -D @brillout/release-me
and make sure you have the following:
// package.json
{
"name": "my-package",
"version": "0.1.2",
"scripts": {
"build": "echo 'Some build step (release-me runs the build script before releasing)'"
},
"devDependencies": {
"@brillout/release-me": "^0.4.0"
}
}
That's it: you can now use pnpm exec release-me patch
to release a new patch version.
We recommend adding the following scripts:
// package.json
{
"name": "my-package",
"version": "0.1.2",
"scripts": {
"build": "echo 'Some build step (release-me runs the build script before releasing)'"
+ "release": "release-me patch",
+ "release:minor": "release-me minor",
+ "release:major": "release-me major",
+ "release:commit": "release-me commit"
},
"devDependencies": {
"@brillout/release-me": "^0.4.0"
}
}
It's a convenient way to communicate how new versions are released to anyone who's discovering your project.
Installation example: 8ff59fe
.
A CHANGELOG.md
file will be automatically generated and updated, see the following section.
For proper CHANGELOG.md
generation make sure to follow Conventional Commits.
In other words:
fix:
=> bug fix or some polishing (e.g. improved error message).feat:
=> new feature, i.e. new functionality.For breaking changes append BREAKING CHANGE:
to the commit message:
fix: make someFunction() take an argument object
BREAKING CHANGE: Replace `someFunction(someArg)` with `someFunction({ someArg })`.
[!NOTE] When introducing a breaking change, in order to respect the semver convention, don't
pnpm exec release-me patch
but dopnpm exec release-me major
instead (orpnpm exec release-me minor
if your package's version is0.y.z
).
Release a new patch/minor/major version:
pnpm exec release-me patch
pnpm exec release-me minor
pnpm exec release-me major
[!NOTE] We recommend defining
package.json#scripts
(see above) and use$ pnpm run
instead of$ pnpm exec
.
Release specific version:
pnpm exec release-me v0.1.2
You can also publish pre-releases such as 0.4.177-commit-ff3d6cd
:
pnpm exec release-me commit
When releasing a package from a monorepo, the following commits are added to the CHANGELOG.md
of the package:
fix(some-package): some commit
), it is included only if the scope matches the package's package.json#name
.fix: some commit
), it is included only if it modifies a file within the package's root directory (i.e. the directory where the package's package.json
lives).FAQs
Publish your npm packages.
The npm package @brillout/release-me receives a total of 1,165 weekly downloads. As such, @brillout/release-me popularity was classified as popular.
We found that @brillout/release-me demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.