
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@lerna/diff
Advanced tools
@lerna/diffDiff all packages or a single package since the last release
Install lerna for access to the lerna CLI.
$ lerna diff [package]
$ lerna diff
# diff a specific package
$ lerna diff package-name
Diff all packages or a single package since the last release.
Similar to
lerna changed. This command runsgit diff.
Changesets is a tool for managing versioning and changelogs with a focus on monorepos. It allows you to create changesets that describe the changes made, and then generates changelogs and version bumps based on those changesets. Unlike @lerna/diff, which focuses on showing diffs, Changesets provides a more comprehensive solution for managing changes and releases in a monorepo.
Lerna is a tool for managing JavaScript projects with multiple packages. While @lerna/diff is a specific command within the Lerna toolset, Lerna itself offers a wide range of functionalities including bootstrapping dependencies, running scripts across packages, and versioning. It provides a more holistic approach to monorepo management compared to the focused functionality of @lerna/diff.
Nx is a smart, fast, and extensible build system with first-class monorepo support and powerful integrations. It offers advanced features like distributed caching, task orchestration, and dependency graph visualization. While @lerna/diff focuses on showing git diffs, Nx provides a more comprehensive suite of tools for managing and optimizing monorepos.
FAQs
Diff all packages or a single package since the last release
The npm package @lerna/diff receives a total of 459,181 weekly downloads. As such, @lerna/diff popularity was classified as popular.
We found that @lerna/diff demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.