
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
commit-convention
Advanced tools
pre-commit : commit 을 실행하기 전에 실행 prepare-commit-msg : commit 메시지를 생성하고 편집기를 실행하기 전에 실행 commit-msg : commit 메시지를 완성한 후 commit 을 최종 완료하기 전에 실행 post-commit : commit 을 완료한 후 실행
applypatch-msg : git am 명령 실행 시 가장 먼저 실행 pre-applypatch : patch 적용 후 실행하며, patch 를 중단시킬 수 있음 post-applypatch : git am 명령에서 마지막으로 실행하며, patch 를 중단시킬 수 없음
pre-rebase : Rebase 하기 전에 실행 post-rewrite : git commit –amend, git rebase 와 같이 커밋을 변경하는 명령을 실행한 후 실행 post-merge : Merge 가 끝나고 나서 실행 pre-push : git push 명령 실행 시 동작하며 리모트 정보를 업데이트 하고 난 후 리모트로 데이터를 전송하기 전에 실행. push 를 중단시킬 수 있음
FAQs
Unknown package
We found that commit-convention demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.