Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
@chatie/semver
Advanced tools
Source: How do Linux Versions Work?
The Enhanced Semantic Versioner for NPM
This module is a wrapper of the NPM module semver, it provide following additional features:
semver-is-prod
semver-id-dev
SemVer
class:
isProd(version: string): boolean
isDev(version: string): boolean
Learn more about the original semver
from its GitHub homepage: semver
Copy from Linux Kernel Version Numbering - http://www.linfo.org/kernel_version_numbering.html:
The second number denotes the major revision of the kernel version. It was formerly the case that even numbers indicated a stable release, that is, one that was deemed fit for production use (i.e., use in a non-experimental environment), such as 1.2, 2.4 or 2.6. Likewise, odd numbers, such as 1.1 or 2.5, have historically represented development releases. They were for testing new features and device drivers until they became sufficiently stable to be included in a stable release. However, this has changed starting with the Linux 2.6.x series, and new feature development now takes place in the same revision number.
Following the Semantic Versioning 2.0 http://semver.org/, and we will be able to use the MINOR version to indicated the release is STABLE or NOT.
Numbering rule:
See also: https://github.com/Chatie/wechaty/issues/905
semver
isProd
& isDev
semver-is-prod
& semver-is-dev
FAQs
The Enhanced Semantic Versioner for NPM
The npm package @chatie/semver receives a total of 25 weekly downloads. As such, @chatie/semver popularity was classified as not popular.
We found that @chatie/semver demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.