Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@lerna/diff
Advanced tools
@lerna/diff is a part of the Lerna monorepo management toolset. It is used to show the git diff of all packages or a specific package since the last release. This is particularly useful in a monorepo setup where multiple packages are managed within a single repository.
Show diff for all packages
This command shows the git diff for all packages in the monorepo since the last release. It helps in understanding what changes have been made across the entire repository.
npx lerna diff
Show diff for a specific package
This command shows the git diff for a specific package in the monorepo since the last release. Replace <package-name> with the actual name of the package. This is useful for focusing on changes made to a particular package.
npx lerna diff <package-name>
Changesets is a tool for managing versioning and changelogs with a focus on monorepos. It allows you to create changesets that describe the changes made, and then generates changelogs and version bumps based on those changesets. Unlike @lerna/diff, which focuses on showing diffs, Changesets provides a more comprehensive solution for managing changes and releases in a monorepo.
Lerna is a tool for managing JavaScript projects with multiple packages. While @lerna/diff is a specific command within the Lerna toolset, Lerna itself offers a wide range of functionalities including bootstrapping dependencies, running scripts across packages, and versioning. It provides a more holistic approach to monorepo management compared to the focused functionality of @lerna/diff.
Nx is a smart, fast, and extensible build system with first-class monorepo support and powerful integrations. It offers advanced features like distributed caching, task orchestration, and dependency graph visualization. While @lerna/diff focuses on showing git diffs, Nx provides a more comprehensive suite of tools for managing and optimizing monorepos.
lerna diff
Diff all packages or a single package since the last release
Install lerna for access to the lerna
CLI.
$ lerna diff [package]
$ lerna diff
# diff a specific package
$ lerna diff package-name
Diff all packages or a single package since the last release.
Similar to
lerna changed
. This command runsgit diff
.
FAQs
Diff all packages or a single package since the last release
We found that @lerna/diff demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.