🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@cakeinpanic/provenance-test

Package Overview
Dependencies
Maintainers
1
Versions
23
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@cakeinpanic/provenance-test

This library is configured with semantic-release for automated versioning and publishing with npm provenance.

Source
npmnpm
Version
2.7.0
Version published
Weekly downloads
1
-80%
Maintainers
1
Weekly downloads
 
Created
Source

@cakeinpanic/provenance-test

This library is configured with semantic-release for automated versioning and publishing with npm provenance.

Automated Release Process

This project uses semantic-release to automate the package release workflow. This includes:

  • Determining the next version number
  • Generating release notes
  • Publishing to npm with provenance
  • Creating GitHub releases

How it works

  • When code is pushed to the main branch, the GitHub Actions workflow is triggered
  • semantic-release analyzes commits since the last release
  • If there are relevant commits, a new version is published based on commit types:
    • fix: or fix(scope): → patch release (1.0.0 → 1.0.1)
    • feat: or feat(scope): → minor release (1.0.0 → 1.1.0)
    • BREAKING CHANGE: in commit body or footer → major release (1.0.0 → 2.0.0)

Commit Message Format

This project follows the Conventional Commits specification:

<type>[optional scope]: <description>

[optional body]

[optional footer(s)]

Common types include:

  • feat: A new feature
  • fix: A bug fix
  • docs: Documentation changes
  • style: Changes that don't affect code meaning (formatting, etc.)
  • refactor: Code changes that neither fix bugs nor add features
  • test: Adding or correcting tests
  • chore: Changes to build process or auxiliary tools

npm Provenance

This package is published with npm provenance, which provides supply chain security by verifying that the package was built from this repository using GitHub Actions.

FAQs

Package last updated on 30 Jul 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts