Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
@thumbtack/changelog-lint
Advanced tools
This linter ensures that changelogs are following the [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) specification.
changelog-lint
This linter ensures that changelogs are following the Keep a Changelog specification.
Rule | Description | Status |
---|---|---|
changelog-heading-1-first | enforce that the changelog begins with a top-level heading | ✅ |
changelog-heading-1-num-occurences | disallow more than one top-level heading | ✅ |
changelog-heading-1-text | enforce that the top-level heading says “Changelog” | ✅ |
changelog-heading-2-dash | enforce that the second-level heading contains a dash “-“ separated by one space on each side | ✅ |
changelog-heading-2-unreleased-num-occurrences | enforce that there is one second-level heading that says “Unreleased“ | ✅ |
changelog-heading-2-valid-date | enforce that second-level headings (that aren't “Unreleased“) contain a date formatted as YYYY-MM-DD | ✅ |
changelog-heading-2-valid-semver | enforce that second-level headings (that aren't “Unreleased“) contain a version that follows Semantic Versioning | ✅ |
changelog-heading-3-duplicate-sections | enforce that versions don't include duplicate third-level headings | ✅ |
changelog-heading-3-text-contents | enforce that third-level headings contain a valid change type | ✅ |
changelog-list-semver-severity | enforce that list items contain a valid severity label | ✅ |
changelog-list-has-change-type | enforce that a change is part of a valid change type | ❌ |
FAQs
This linter ensures that changelogs are following the [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) specification.
The npm package @thumbtack/changelog-lint receives a total of 5 weekly downloads. As such, @thumbtack/changelog-lint popularity was classified as not popular.
We found that @thumbtack/changelog-lint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.