
Research
Security News
The Growing Risk of Malicious Browser Extensions
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
@elliemae/scmutil
Advanced tools
Follows GIT Guidelines & Conventional Commit Guidelines
npm i -g @elliemae/scmutil
Following are required environment variables for comands that nees to connect to github,
following are optional and
scmutil [command]
Commands:
scmutil get <command> Get details from SCM
scmutil merge <src> <target> Auto merges source branch with target branch and
creates Pull Request in Github
scmutil release Prepares Release Notes, Tags releaes, Creates
Github Release and Uploads assets to the release
tag
Options:
--help Show help [boolean]
Examples:
scmutil get outdated
scmutil get contributors
scmutil get releases
scmutil get slack-release-notes
scmutil release --version 20.0.1 --format calver --assets dist.zip
source.zip
scmutil merge develop release/21.1.0
scmutil release
Prepares Release Notes, Tags releaes, Creates Github Release and Uploads assets
to the release tag
Options:
--help Show help [boolean]
--version, -v release version. format: YY.QUARTER.PATCH e.g: 20.1.0
[string] [required]
--format, -f choose a versioning format
[choices: "calver", "semver"] [default: "calver"]
--assets Assets to be attached to the Github release. e.g:
dist.zip source.zip [array] [default: ""]
--prerelease, --pre identify the release as a prerelease
[boolean] [default: "false"]
--logLevel log level
[choices: "debug", "info", "warn", "error"] [default: "info"]
Examples:
scmutil release --version 20.0.1 --format calver --assets dist.zip
source.zip
scmutil get contributors
Collect list of authors and committers worked on the latest release and writes to
a JSON file
Options:
--help Show help [boolean]
--logLevel log level
[choices: "debug", "info", "warn", "error"] [default: "info"]
scmutil get releases
get releases of a scm repository
Options:
--help Show help [boolean]
--last get last release name [boolean]
--logLevel log level
[choices: "debug", "info", "warn", "error"] [default: "info"]
scmutil get slack-release-notes
get release note of last GitHub release and format for slack
Options:
--help Show help [boolean]
--name release name [string] [default: ""]
--logLevel log level
[choices: "debug", "info", "warn", "error"] [default: "info"]
scmutil merge <src> <target>
Auto merges source branch with target branch and creates Pull Request in Github
Positionals:
src source branch name [string] [required]
target target branch name [string] [required]
Options:
--help Show help [boolean]
--dryrun skips creating Pull Request in Github [boolean] [default: true]
--logLevel log level
[choices: "debug", "info", "warn", "error"] [default: "info"]
npm run setup
npm run test
Can I ignore files from merge?
Yes. create a .gitpathspec file in your repo root and list file(s) that you want to ignore during merge. Separate each line using LF. You can use glob patterns to select multiple files.
sample .gitpathsepc file given below. This file ignores merge for all markdown files in the repo, package.json in the root of the repo and ci_cd/jenkinsfile.
**/*.md
ci_cd/jenkinsfile
package.json
Can I specify merge strategy when there are merge conflicts?
Yes. Add the file(s) to .gitattributes (in root of your repo) and specify one of the below strategies. Glob patterns are allowed
sample .gitattributes file contnet below
**/CHANGELOG.md merge=ours
**/package.json merge=theirs
README.md merge=ours
ci_cd/jenkinsfile merge=ours
FAQs
ICE MT Source Control Management Utilities
We found that @elliemae/scmutil demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Research
Security News
An in-depth analysis of credential stealers, crypto drainers, cryptojackers, and clipboard hijackers abusing open source package registries to compromise Web3 development environments.
Security News
pnpm 10.12.1 introduces a global virtual store for faster installs and new options for managing dependencies with version catalogs.