
Security News
AGENTS.md Gains Traction as an Open Format for AI Coding Agents
AGENTS.md is a fast-growing open format giving AI coding agents a shared, predictable way to understand project setup, style, and workflows.
catch-uncommitted
Advanced tools
A simple sh script to error if you have uncommitted or unversioned files in your current directory.
This is designed to be used in your CI process, if you have some generated build output committed, to ensure that it's up to date. Run your build, then run this script, and it'll fail if there are any new or changed files that appear.
Checks for new files using git
, so this won't complain about changed files that are ignored by git
.
This depends on git
being available in your $PATH
.
Install it:
npm install --save-dev catch-uncommitted
Add it to your CI script in package.json:
"scripts": {
"ci": "npm run build && catch-uncommitted"
}
Run it:
npm run ci
[... your build here ...]
No unexpected changes, all good.
When running catch-uncommitted --catch-no-git
, the script will exit without an
error when git isn't available. This can be useful when you need to run the same
tests in different environments, where some of them do not have git available.
When running catch-uncommitted --skip-node-versionbot-changes
, the script will
skip checking the package.json
& the CHANGELOG.md
for changes, so that it
can work as part of the balenaCI pipeline.
Custom file exclusions may be set with catch-uncommitted --exclude
. This flag
can be used in conjunction with other flags. For example, to skip checking a file
located at my/file
, use catch-uncommitted --exclude=my/file
. Multiple files
may be set by separating paths with a comma: --exclude=my/file,VERSION
.
v2.0.0
FAQs
Script to catch uncommitted/unversioned files, for CI
The npm package catch-uncommitted receives a total of 5,592 weekly downloads. As such, catch-uncommitted popularity was classified as popular.
We found that catch-uncommitted demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
AGENTS.md is a fast-growing open format giving AI coding agents a shared, predictable way to understand project setup, style, and workflows.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.