
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@lerna/diff
Advanced tools
lerna diffDiff all packages or a single package since the last release
Install lerna for access to the lerna CLI.
$ lerna diff [package]
$ lerna diff
# diff a specific package
$ lerna diff package-name
Diff all packages or a single package since the last release.
Similar to
lerna changed. This command runsgit diff.
Changesets is a tool for managing versioning and changelogs with a focus on monorepos. It allows you to create changesets that describe the changes made, and then generates changelogs and version bumps based on those changesets. Unlike @lerna/diff, which focuses on showing diffs, Changesets provides a more comprehensive solution for managing changes and releases in a monorepo.
Lerna is a tool for managing JavaScript projects with multiple packages. While @lerna/diff is a specific command within the Lerna toolset, Lerna itself offers a wide range of functionalities including bootstrapping dependencies, running scripts across packages, and versioning. It provides a more holistic approach to monorepo management compared to the focused functionality of @lerna/diff.
Nx is a smart, fast, and extensible build system with first-class monorepo support and powerful integrations. It offers advanced features like distributed caching, task orchestration, and dependency graph visualization. While @lerna/diff focuses on showing git diffs, Nx provides a more comprehensive suite of tools for managing and optimizing monorepos.
FAQs
Diff all packages or a single package since the last release
The npm package @lerna/diff receives a total of 461,499 weekly downloads. As such, @lerna/diff popularity was classified as popular.
We found that @lerna/diff demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.