
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@semantic-release/apm
Advanced tools
semantic-release plugin to publish Atom packages with apm.
Step | Description |
---|---|
verifyConditions | Verify the presence of the ATOM_ACCESS_TOKEN environment variable and the apm CLI. |
prepare | Update the package.json version with npm version . |
publish | Publish the Atom package. |
$ npm install @semantic-release/apm @semantic-release/git -D
Note: apm require to have the version in package.json
pushed to the repository so the @semantic-release/git
plugin is required.
The plugin can be configured in the semantic-release configuration file:
{
"plugins": [
"@semantic-release/commit-analyzer",
"@semantic-release/release-notes-generator",
"@semantic-release/github",
"@semantic-release/apm",
"@semantic-release/git"
]
}
The plugin uses the apm
CLI which has to be installed in your CI environment and available in the PATH
.
See the Atom Package CI Scripts documentation to install apm
in your CI.
Note: If you are running multiple versions of Atom in CI (for example, Stable and Beta), ensure that the semantic-release
command is run on a build using the Stable channel of Atom as the Beta channel builds only provide apm-beta
. If you are using travis-deploy-once this can be achieved by setting the Stable channel build to be the last build to run, or by using the buildLeaderId
option.
The Atom authentication configuration is required and can be set via environment variables.
Visit your account page on Atom.io to obtain your authentication token. The token has to be made available in your CI environment via the ATOM_ACCESS_TOKEN
environment variable.
Variable | Description |
---|---|
ATOM_ACCESS_TOKEN | The token used to authenticate with Atom registry. |
FAQs
semantic-release plugin to publish Atom packages with apm
The npm package @semantic-release/apm receives a total of 143 weekly downloads. As such, @semantic-release/apm popularity was classified as not popular.
We found that @semantic-release/apm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.