Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
changelog-view
Advanced tools
Tool view changelog in console.
It list only the changes between the specified version and the latest version.
You can see it as a git diff
between version for changelogs.
Yarn
yarn install --dev changelog-view
npm
npm install (-g) changelog-view
or you can use npx does not seems to work with it, maybe an issue with the npx
to automatically run the program@
yarn / npm:
changelog-view <package@currentVersion> [<package@currentVersion> ...]
Example
changelog-view howardabrams/node-mocks-http@1.5.4 mapado/rest-client-js-sdk@0.14.1
changelog-view
tries to detect automatically the current version of your currently installed dependencies.
It works fine with npm
/ yarn
for JavaScript projects, and with composer
for PHP projects.
, so you can just do:
Imagine you have this package.json:
{
"dependencies": {
"rest-client-sdk": "^1.0.0"
}
}
The following command:
changelog-view rest-client-sdk
Will ouput:
... other version
## [1.0.1] - 2017-07-03 - [YANKED]
### Changed
* Make urijs implementation work again but might be breaking
* Url constructor passed with noTransform = true for better perf and avoid potential bugs
Same for PHP if you do
changelog-view behat/transliterator
Will output:
# CHANGELOG for "Behat/Transliterator"
# 1.2.0 / 2017-04-04
* Stop Transliterator::postProcessText() breaking words containing apostrophes
The package checks on github if a file named CHANGELOG.md
or HISTORY.md
is present.
If not, it tries to list the github releases.
It tries to parse the markdown files and filter only version greater than the specified version.
pip freeze
command but seems to be "the old way"npx
workFAQs
Tool to view changelog of package in console
The npm package changelog-view receives a total of 1 weekly downloads. As such, changelog-view popularity was classified as not popular.
We found that changelog-view demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.