
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@vtabary/keepachangelog-cli
Advanced tools
Made to update the CHANGELOG.md
file when creating a new library version.
The CHANGELOG.md
file should be based on the Keepachangelog conventions.
$ npx keepachangelog -h
Usage: keepachangelog [options] [command]
Options:
-V, --version output the version number
-h, --help display help for command
Commands:
release [options] [number] add a new entry. When no number is provided, it will try to use the npm_package_version instead.
confirm [options] [number] ask the user a confirmation before creating the new version
display [options] [number] display the summary of the changelog for a specific version. Can take a semver version number or "unreleased" as an argument. Default will be unreleased
help [command] display help for command
npx keepachangelog release <version> -c
It can be used in the scripts
of the package.json file, using the given environment variable npm_new_version
:
{
...
"scripts": {
// Update the CHANGELOG.md file and add it to the staged files
// Use $npm_new_version and $npm_old_version with npm 7+ on Linux, or $npm_package_version with npm 6.x
// Use the format %npm_new_version% on Windows
// The `--current-version` option is optional since the cli can read the packagee.json file
"preversion": "keepeachangelog display unreleased && keepachangelog confirm $npm_new_version --current-version $npm_old_version",
"version": "keepachangelog release $npm_new_version && git add ./CHANGELOG.md",
// Optional: Add the updated file to the commit dedicated to the version, and push the modification to the origin repository
"postversion": "git push origin HEAD && git push origin v$npm_new_version",
}
...
}
confirm
command to display the unreleased messages[0.4.0] - 2021-12-26
display
to show the messages of a versionRelease
class into multiple atomic functionsFAQs
conventional-changelog-cli
The npm package @vtabary/keepachangelog-cli receives a total of 9 weekly downloads. As such, @vtabary/keepachangelog-cli popularity was classified as not popular.
We found that @vtabary/keepachangelog-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.