Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
@rsc-labs/backstage-changelog-plugin-backend
Advanced tools
Backstage Changelog Plugin is configurable and customizable plugin for viewing a changelog. You can write your own parser or use default one, which follows [Keep the changelog](https://keepachangelog.com/) notation.
Backstage Changelog Plugin is configurable and customizable plugin for viewing a changelog. You can write your own parser or use default one, which follows Keep the changelog notation.
Description from Keep the changelog.
A changelog is a file which contains a curated, chronologically ordered list of notable changes for each version of a project. It is being created to make it easier for users and contributors to see precisely what notable changes have been made between each release (or version) of the project. People need changelog. Whether consumers or developers, the end users of software are human beings who care about what's in the software. When the software changes, people want to know why and how.
If you haven't already, check out the Backstage docs and create a Backstage application with
npx @backstage/create-app
Then, you will need to install and configure the changelog plugins for the frontend and the backend. Frontend plugin installation can be found here: Frontend plugin
Install:
cd packages/backend
yarn add @rsc-labs/backstage-changelog-plugin-backend
Create a file packages/backend/src/plugins/changelog.ts
:
import {
createRouter,
} from '@rsc-labs/backstage-changelog-plugin-backend'
import { Router } from 'express';
import { PluginEnvironment } from '../types';
export default async function createPlugin(
env: PluginEnvironment,
): Promise<Router> {
return await createRouter({
discovery: env.discovery,
tokenManager: env.tokenManager,
logger: env.logger,
reader: env.reader
});
}
Add the plugin to packages/backend/src/index.ts
:
// import:
import changelog from './plugins/changelog';
...
async function main() {
...
// add env
const changelogEnv = useHotMemoize(module, () => createEnv('changelog'));
...
// add to router
apiRouter.use('/changelog', await changelog(changelogEnv));
...
}
backend.add(import('@rsc-labs/backstage-changelog-plugin-backend'));
Backend plugin supports 3 fields, which can be used for reading a Changelog. Changelog itself is related to entity, so configuration is done by Annotations.
apiVersion: backstage.io/v1alpha1
kind: Component
metadata:
name: example-website
annotations:
backstage.io/source-location: "file:/home/backstage/backstage-changelog/examples/"
changelog-file-ref: "url:https://github.com/RSC-Labs/backstage-changelog-plugin/tree/main/CHANGELOG.md"
changelog-name: "CHANGELOG_CUSTOM_NAME.md"
Plugin uses following logic:
Both "file" and "url" options are supported.
[ ] Unit tests
Contributions are welcome and they are greatly appreciated!
Licensed under the Mozilla Public License, Version 2.0: https://www.mozilla.org/en-US/MPL/2.0/
© 2023 RSC https://rsoftcon.com/
FAQs
Backstage Changelog Plugin is configurable and customizable plugin for viewing a changelog. You can write your own parser or use default one, which follows [Keep the changelog](https://keepachangelog.com/) notation.
We found that @rsc-labs/backstage-changelog-plugin-backend demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.