
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
bumpx-action
Advanced tools
A GitHub Action to install system dependencies using bumpx.
This action allows you to easily install dependencies with bumpx in your GitHub Actions workflows.
- name: Install Dependencies with bumpx
uses: stacksjs/bumpx-installer@v1
# Automatically detects and installs project dependencies
# Optional parameters:
# with:
# packages: node python go # override auto-detection
# config-path: bumpx.config.ts
Name | Description | Required | Default |
---|---|---|---|
packages | Space-separated list of packages to install (overrides auto-detection) | No | (empty) - auto-detects from project files |
config-path | Path to bumpx config file | No | bumpx.config.ts |
name: CI
on:
push:
branches: [main]
pull_request:
branches: [main]
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install Dependencies
uses: stacksjs/bumpx-installer@v1
# Automatically detects Node.js from package.json
# and installs node + any other detected dependencies
name: CI
on:
push:
branches: [main]
pull_request:
branches: [main]
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install Dependencies from Config
uses: stacksjs/bumpx-installer@v1
# Will automatically detect packages from bumpx.config.ts
name: Multi-platform CI
on:
push:
branches: [main]
pull_request:
branches: [main]
jobs:
test:
runs-on: ${{ matrix.os }}
strategy:
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
steps:
- uses: actions/checkout@v4
- name: Install Dependencies
uses: stacksjs/bumpx-installer@v1
# Auto-detects dependencies across all platforms
name: Manual Override
on:
push:
branches: [main]
jobs:
setup:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install Specific Dependencies
uses: stacksjs/bumpx-installer@v1
with:
packages: node python go rust
# Override auto-detection with specific packages
- name: Run Tests
run: npm test
name: Custom Config
on:
push:
branches: [main]
jobs:
setup:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install Dependencies from Custom Config
uses: stacksjs/bumpx-installer@v1
with:
config-path: .github/bumpx.config.ts
- name: Run Tests
run: npm test
bun test
Please see our releases page for more information on what has changed recently.
Please see CONTRIBUTING for details.
For help, discussion about best practices, or any other conversation that would benefit from being searchable:
For casual chit-chat with others using this package:
Join the Stacks Discord Server
"Software that is free, but hopes for a postcard." We love receiving postcards from around the world showing where Stacks is being used! We showcase them on our website too.
Our address: Stacks.js, 12665 Village Ln #2306, Playa Vista, CA 90094, United States 🌎
We would like to extend our thanks to the following sponsors for funding Stacks development. If you are interested in becoming a sponsor, please reach out to us.
The MIT License (MIT). Please see LICENSE for more information.
Made with 💙
FAQs
GitHub Action for bumpx version bumping tool.
The npm package bumpx-action receives a total of 473 weekly downloads. As such, bumpx-action popularity was classified as not popular.
We found that bumpx-action demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.