
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@js-templates/typescript-library
Advanced tools
✨ Your Library Description ✨
@js-templates/typescript-library entries with your library namejs-templates/typescript-library entries with your repo pathYour Library Description entries with your library descriptionYour Name entries with your library namelogo.svgaltNPM_TOKENFULL_ACCESS_GITHUB_TOKEN if you plan to set up the branch protectionSettings > Branches > Add rulemain branchtest-and-buildpr-labelerrelease/* instead of mainrepo permissionsFULL_ACCESS_GITHUB_TOKENRemove Template Features and Using Template sections from README
The README on main branch may contain some unreleased changes.
Go to release/latest branch to see the actual README for the latest version from NPM.
NPM:
npm install @js-templates/typescript-library
Yarn:
yarn add @js-templates/typescript-library
Please follow Conventions
The dev branch is main - any developer changes is merged in there.
Also, there is a release/latest branch. It always contains the actual source code for release published with latest tag.
All changes is made using Pull Requests - push is forbidden. PR can be merged only after successfull test-and-build workflow checks.
When PR is merged, release-drafter workflow creates/updates a draft release. The changelog is built from the merged branch scope (feat, fix, etc) and PR title. When release is ready - we publish the draft.
Then, the release workflow handles everything:
release/latest branchmainBREAKING CHANGES labelmainbetarelease/beta branchrelease/betav1.0.0-beta, pointing to release/beta branchbeta versions use semver build syntax: v1.0.0-beta+1release workflow will publish your package with the beta tagbeta version is ready to become latest - create a Pull Request from release/beta to main branchFeature branches:
feat/, fix/, docs/, refactor/, and etc., depending on the changes you want to propose (see pr-labeler.yml for a full list of scopes)Commits:
.cz-config.jsPull requests:
FAQs
Your Library Description
We found that @js-templates/typescript-library demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.