
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
changelog-light
Advanced tools
Generate a changelog with conventional commit types.
The basic requirements:
NPM install...
$ npm i changelog-light
or Yarn
$ yarn add changelog-light
$ changelog --help
Generate a CHANGELOG.md with conventional commit types.
Usage: changelog [options]
Options:
-c, --commit Commit CHANGELOG.md and package.json with a release commit
[boolean] [default: true]
-d, --date CHANGELOG.md release date in the form of a valid date
string. Uses system new Date([your date])
[string] [default: "2022-10-13T12:25:39.055Z"]
-n, --non-cc Allow non-conventional commits to apply a semver weight and
appear in CHANGELOG.md under a general type description.
[boolean] [default: false]
-o, --override Use a version you define. [string]
-r, --dry-run Generate CHANGELOG.md sample output
[boolean] [default: false]
--commit-path CHANGELOG.md path used for commits. This will be "joined"
with "remote-url". Defaults to the commits path for GitHub.
[string] [default: "commit/"]
--pr-path CHANGELOG.md path used for PRs/MRs. This will be "joined"
with "remote-url". Defaults to the PR path for GitHub.
[string] [default: "pull/"]
--remote-url Git remote get-url for updating CHANGELOG.md base urls.
This should start with "http". Defaults to "$ git remote
get-url origin" [string]
-h, --help Show help [boolean]
-v, --version Show version number [boolean]
Using changelog-light
within a project requires one thing... formatting your commit messages using conventional commit types
This project leverages this conventional commit types resource to determine
how CHANGELOG.md
is generated.
Using within a project you could apply changelog-light
as a NPM script in package.json
"scripts": {
"release": "changelog"
}
This project is influenced by the now deprecated project Standard Version.
The primary differences between Standard Version and this project are the weighting assigned to commit message types and a fraction of the features.
Contributing? Guidelines can be found here CONTRIBUTING.md.
FAQs
Generate a changelog from commits.
We found that changelog-light demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.