
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@hexdigital/config-commitlint
Advanced tools
Hex Digital's commitlint config enforcing conventional commits
Shareable commitlint config enforcing conventional commits.
Use with @commitlint/cli and @commitlint/prompt-cli.
# Add required deps
pnpm add -D @hexdigital/config-commitlint @commitlint/cli
# or
yarn add -D @hexdigital/config-commitlint @commitlint/cli
# Create your project's commitlint config
echo "module.exports = {extends: ['@hexdigital/config-commitlint']};" > commitlint.config.js
The following rules are considered problems for @hexdigital/config-commitlint and will yield a non-zero exit code when not met.
Consult docs/rules for a list of available rules.
condition: type is found in value
rule: always
level: error
value
[
'build',
'chore',
'ci',
'docs',
'feat',
'fix',
'perf',
'refactor',
'revert',
'style',
'test'
];
echo "foo: some message" # fails
echo "fix: some message" # passes
type is in case valuealwayserror'lowerCase'
echo "FIX: some message" # fails
echo "fix: some message" # passes
type is emptynevererrorecho ": some message" # fails
echo "fix: some message" # passes
subject is in one of the cases ['sentence-case', 'start-case', 'pascal-case', 'upper-case']nevererrorecho "fix(SCOPE): Some message" # fails
echo "fix(SCOPE): Some Message" # fails
echo "fix(SCOPE): SomeMessage" # fails
echo "fix(SCOPE): SOMEMESSAGE" # fails
echo "fix(scope): some message" # passes
echo "fix(scope): some Message" # passes
subject is emptynevererrorecho "fix:" # fails
echo "fix: some message" # passes
subject ends with valuenevererror'.'
echo "fix: some message." # fails
echo "fix: some message" # passes
header has value or less charactersalwayserror100
echo "fix: some message that is way too long and breaks the line max-length by several characters" # fails
echo "fix: some message" # passes
footer should have a leading blank linealwayswarningecho "fix: some message
BREAKING CHANGE: It will be significant" # warning
echo "fix: some message
BREAKING CHANGE: It will be significant" # passes
footer each line has value or less charactersalwayserror100
echo "fix: some message
BREAKING CHANGE: footer with multiple lines
has a message that is way too long and will break the line rule 'line-max-length' by several characters" # fails
echo "fix: some message
BREAKING CHANGE: footer with multiple lines
but still no line is too long" # passes
body should have a leading blank linealwayswarningecho "fix: some message
body" # warning
echo "fix: some message
body" # passes
body each line has value or less charactersalwayserror100
echo "fix: some message
body with multiple lines
has a message that is way too long and will break the line rule 'line-max-length' by several characters" # fails
echo "fix: some message
body with multiple lines
but still no line is too long" # passes
FAQs
Hex Digital's commitlint config enforcing conventional commits
We found that @hexdigital/config-commitlint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.