Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@kazanexpress/frontend-commitlint
Advanced tools
A commit linter for projects of KazanExpress frontend division
A commit linter for projects of KazanExpress frontend division
Check if your current environment adheres to these specs:
NodeJS
version >= 8.0.0 installed in your bash environment.git
version >= 2.9.To add the linter to your current project, just execute the following commands in your project's root directory:
npm i -D @kazanexpress/frontend-commitlint
This repository consists of two main things:
Commit formatting
section for more info.Linter installation
section for more info.If there are any proposals or comments on the matter - feel free to create an issue! 😉
This section covers conventions for commit message formatting used at KazanExpress/FrontEnd.
We found several reasons for establishing commit conventions:
Any commit message header (first line) must consist of following parts:
Type - the first word in the commit message.
Fix
- some bug or error is fixed (preferably with an issue number, see pt. 2).Feature
- some new feature is introduced (preferably with an issue number, see pt. 2).Add
- addition of new things in general.
Add npm-package-name - v1.0.0
- example of adding a new npm packageAdd modules/user - intial functionality
- example of adding a new module in folder modules
Update
- updating of things in general (package versions, for example).Chore
- routine maintenance, things that do not directly fall into any other type.
Refactor
- code/structure refactoring. File renames go here too.Content
- changes to static content that do not affect functionality.Revert
- commits/changes reverts.Docs
- updates to documentation.Remove
- removal of things in general (files, functionality, etc.).
Remove npm-package-name - deprecated
- example for removal of an existing npm packageRemove [User.oldFunction] modules/user - I'm sick of it
- example for removal of an existing function in module user
Related issue, optional. Should be placed whenever changes in commit resolve or affect an issue in a certain way. If many issues are affected, choose the most relevant one and place others in commit message [6].
Breaking change flag, optional. Shows if there was a breaking change in the commit.
Change scope - a semi-complete scope of the change in a subject. Optional.
Subject of the change - usually would be a file or a folder that is subject to change in this commit.
*
(as in Add * - initial commit
) to specify that every possible subject is affected.*
.Commit message written in a short informal way. Should precisely describe commit's change, giving context to it.
If a commit message has a body, it should start with a preceding blank line, like this:
Feature [toServer] modules/common - new method `toServer`
Convertable class can do reversed convertation from now on.
But only with a separate convert function with it's own map
If a commit message header (first line) is too long - informal message ([6]
) can be omitted or replaced with a semicolon (:
):
Feature [toServer] modules/common:
Convertable class can do reversed convertation from now on.
But only with a separate convert function using it's own map.
Refactor rules - restructure & move to a separate folder
Fix [headerPattern] rules/pattern - spaces in commitlint headerPattern
Update *: finish initial setup
Add [LOGOUT] store/modules/user
Refactor [reset] store/modules/order:
reset mutation now uses default object factory instead of hard-coding values
Remove parakeet-mapper - they fixed backend
Fix #132 [Product.constructor] types/models/product:
object reference was being wrongly reassigned
Chore [tmpVer] store/plugins - bump store version
Chore [LOGOUT] store/module/* - make interconnected logouts work
Chore [rr-widget] pages/product - again updates for retail-rocket
FAQs
A commit linter for projects of KazanExpress frontend division
We found that @kazanexpress/frontend-commitlint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.