Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
unfancy release history tracking
functions:
init
- create a CHANGELOG.md fileadd
- add new changes to the changelog under a 'HEAD (Unreleased)' headingrelease
- move all unreleased changes under a new release versionchg
can be useful when built into a release/deploy script or paired with a pull request merging script like pulley.
It does not try to automatically generate changes from git commits or github pull requests, though you could build that on top of the chg
functions.
CHANGELOG
=========
## HEAD (Unreleased)
* Removed crusty semantic html, javascript app ftw
--------------------
## 2.0.0 (2007-3-13)
* Removed horrible tables, semantic html ftw
* Switched background to vertical gradient
* Added dropshadows to EVERYTHING
## 1.1.1 (2002-08-16)
* Added a dot.gif to 3,000 table cells to fix layout issues
## 1.1.0 (2002-05-17)
* Removed horrible Flash, table layout ftw
* Switched background to horizontal gray lines
## 1.0.1 (2000-07-01)
* Duplicated all Flash content in HTML so Yahoo can see it
## 1.0.0 (2000-04-14)
* Removed horrible frames, Flash ftw
* Switched background to fast moving clouds like 2advanced V3
## 0.1.0 (1997-01-26)
* Added a "GIF" of a construction worker. ha ha ha
* Navigation frame ftw
* Added repeating tanbark background to look more professional
# install
[sudo] npm install -g chg
# create CHANGELOG.md
chg init
# add a change
chg add 'My first change'
# create a release
chg release '0.0.1'
shell
# install
npm install chg --save
javascript
var chg = require('chg');
// create CHANGELOG.md
chg.init({}, callback);
// add a change
chg.add('My first change', {}, callback);
// create a release
chg.release('0.0.1', {}, callback);
// each command can take a callback, but each also returns synchronously
var changeData = chg.release('3.0.0', {});
// changeData = { title: '0.0.1', changes: '* Removed crusty semantic html, javascript app ftw', changeLog: '/* entire changelog */' }
chg.find('1.1.1');
// => { title: '## 1.1.1 (2002-08-16)', changes: ['* Added a dot.gif to 3,000 table cells to fix layout issues'], changesRaw: '* Added a dot.gif to 3,000 table cells to fix layout issues' }
shell
# install
npm install chg --save-dev
Gruntfile.js
grunt.loadNpmTasks('chg');
shell
# create CHANGELOG.md
grunt chg-init
# add a change
grunt chg-add
# create a release
grunt chg-release
"scripts": {
"version": "chg release -y && git add -A CHANGELOG.md"
}
The -y
flag will use the current version in package.json
Creates a CHANGELOG.md file in the current directory.
chg init
CHANGELOG
=========
## HEAD (Unreleased)
* _(none)_
--------------------
Add a line to the change log. The first argument is the line to add.
chg add "My new change!"
CHANGELOG
=========
## HEAD (Unreleased)
* My new change!
--------------------
Add a line to the change log. The first argument is the version to be used as the release version.
chg release "v0.1.0"
CHANGELOG
=========
## HEAD (Unreleased)
* _(none)_
--------------------
## 0.1.0 (2014-01-31)
* My new change!
Finds a release given a version.
Delete the current changelog
See CHANGELOG.md :scream_cat:
Copyright (c) 2014 heff. Licensed under the Apache license.
FAQs
simple changelog/release history manager
We found that chg demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.