Product
Socket Now Supports uv.lock Files
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
@coocoo/pre-publish
Advanced tools
用于辅助lerna管理的项目
配置指定依赖模块;给项目加上tag,生成对应的changelog文档等
npm install --save-dev @ies/pre-publish
prePublish eden docker
prePublish eden local
prePublish eden alpha
配置文件说明:
在项目的根目录创建 pre.publish.js
module.exports = {
local: [
{
targetPackageName: 'package1',
removePackages: ['package2', 'package3'],
addPackages: [],
targetPkgAsLernaLocalPkgsDep: ['package0'] // 可选择填写
}
],
docker: [],
alpha: [],
common: [] // 通用配置,可以自行定制配置
}
pre.publish.js
中配置参数说明:
属性 | 类型 | 必填 | 描述 |
---|---|---|---|
targetPackageName | String | true | 目标模块 |
removePackages | Arrray | false | 在目标模 中卸载依赖模块(类似 npm uninstall —save xxx) |
addPackages | Arrray | false | 在目标模块 中安装依赖模块(类似 npm install —save-dev xxx) |
targetPkgAsLernaLocalPkgsDep | Arrray | False | 将目标模块 作为数组中模块的指定版本的依赖模块。(类似lerna add targetPackageName —exact —scope xxx) |
常用命令:
发布首个版本
prePublish release --first-release
发布预发版本可以使用--prerelease
标记,如:
prePublish release --prerelease
如果当前版本是v1.0.0
,在上述命令后你的版本将变为 v1.0.1-0
。如果预发版本要包含alpha
前缀,可以通过 --prerelease <name>
设置前缀。如:
prePublish release --prerelease alpha
此时版本号将变为 v1.0.1-alpha.0
。除了 --first-release
和 —prerelease
标志外,还支持--release-as
它支持三种不同的参数:major
、minor
、patch
,使用方式如下:
prePublish release --release-as minor
更多命令:prePublish release -h
FAQs
帮助eden项目配置合适的发布环境
We found that @coocoo/pre-publish demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.