Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@commitlint/config-angular-type-enum
Advanced tools
Shareable commitlint config enforcing the angular commit convention types
@commitlint/config-angular-type-enum is a configuration package for Commitlint that enforces commit message conventions based on the Angular commit message guidelines. It helps ensure that commit messages are consistent and follow a predefined format, which is particularly useful for maintaining a clean and understandable project history.
Enforcing Commit Message Types
This feature allows you to enforce specific commit message types such as 'feat', 'fix', 'docs', etc., based on Angular's commit message conventions. By extending the configuration, you ensure that all commit messages adhere to these types.
{
"extends": ["@commitlint/config-angular-type-enum"]
}
Customizing Commit Message Types
This feature allows you to customize the list of allowed commit message types. You can add or remove types as needed to fit your project's requirements.
{
"rules": {
"type-enum": [
2,
"always",
[
"feat",
"fix",
"docs",
"style",
"refactor",
"perf",
"test",
"build",
"ci",
"chore",
"revert"
]
]
}
}
@commitlint/config-conventional is another configuration package for Commitlint that enforces conventional commit message guidelines. It is similar to @commitlint/config-angular-type-enum but follows the broader Conventional Commits specification rather than Angular's specific guidelines.
Commitizen is a tool that helps you write commit messages following a standard convention. It provides an interactive CLI to guide you through the commit process, ensuring that your messages are formatted correctly. While it serves a similar purpose to @commitlint/config-angular-type-enum, it focuses more on the user experience of writing commits rather than just enforcing rules.
semantic-release automates the versioning and package publishing process based on commit messages. It uses commit message conventions to determine the type of release (major, minor, patch) and generates changelogs automatically. While it includes commit message validation, its primary focus is on automating the release workflow.
Shareable commitlint
config enforcing the angular commit convention types.
Use with @commitlint/cli and @commitlint/prompt-cli.
See @commitlint/config-angular for full angular conventions.
npm install --save-dev @commitlint/config-angular-type-enum @commitlint/cli
echo "module.exports = {extends: ['@commitlint/config-angular-type-enum']};" > commitlint.config.js
echo "foo: bar" | commitlint # fails
echo "build: bar" | commitlint # passes
// commitlint.config.js
const types = require('@commitlint/config-angular-type-enum');
// Use as rule creating errors for non-allowed types
module.exports = {
rules: {
...types.rules,
},
};
// Warn for non-allowed types
module.exports = {
rules: {
'type-enum': [1, 'always', types.values()],
},
};
FAQs
Shareable commitlint config enforcing the angular commit convention types
The npm package @commitlint/config-angular-type-enum receives a total of 96,081 weekly downloads. As such, @commitlint/config-angular-type-enum popularity was classified as popular.
We found that @commitlint/config-angular-type-enum demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.