New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

commit-stream

Package Overview
Dependencies
Maintainers
0
Versions
9
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

commit-stream - npm Package Compare versions

Comparing version 2.1.0 to 2.2.0

15

CHANGELOG.md

@@ -0,1 +1,16 @@

## [2.2.0](https://github.com/nodejs/commit-stream/compare/v2.1.0...v2.2.0) (2024-11-27)
### Features
* add cveId support ([6c82ccd](https://github.com/nodejs/commit-stream/commit/6c82ccd24e44167433126ba2bf4e95c8c4f41297))
### Bug Fixes
* add permissions: write to create release action ([776bc30](https://github.com/nodejs/commit-stream/commit/776bc302aebaef471870b56586572225325af238))
### Tests
* add CVE-ID test ([0748578](https://github.com/nodejs/commit-stream/commit/0748578e475534d96be8e4b9f306f5d84c7e383a))
* fix sha cve id pr ([670b4ab](https://github.com/nodejs/commit-stream/commit/670b4abd056ca4099e8dcb02d31504a857db991c))
## [2.1.0](https://github.com/rvagg/commit-stream/compare/v2.0.1...v2.1.0) (2023-05-16)

@@ -2,0 +17,0 @@

2

commit-stream.js

@@ -49,2 +49,4 @@ import through2 from 'through2'

commit.reviewers.push({ name: m[1], email: m[2] })
} else if ((m = line.match(/\bCVE-ID:\s+(CVE-\d{4}-\d{5})\b/)) !== null) {
commit.cveId = m[1];
} else if ((m = line.match(/^\s+PR(?:[- ]?URL)?:?\s*(.+)\s*$/) || line.match(/\(#(\d+)\)$/)) !== null) {

@@ -51,0 +53,0 @@ commit.prUrl = m[1]

8

package.json
{
"name": "commit-stream",
"version": "2.1.0",
"version": "2.2.0",
"description": "Turn a `git log` into a stream of commit objects",

@@ -14,3 +14,3 @@ "main": "commit-stream.js",

"type": "git",
"url": "https://github.com/rvagg/commit-stream.git"
"url": "https://github.com/nodejs/commit-stream.git"
},

@@ -20,5 +20,5 @@ "author": "Rod <rod@vagg.org> (http://r.va.gg/)",

"bugs": {
"url": "https://github.com/rvagg/commit-stream/issues"
"url": "https://github.com/nodejs/commit-stream/issues"
},
"homepage": "https://github.com/rvagg/commit-stream",
"homepage": "https://github.com/nodejs/commit-stream",
"devDependencies": {

@@ -25,0 +25,0 @@ "bl": "^6.0.1",

@@ -227,1 +227,20 @@ import commitStream from './commit-stream.js'

})
test('cve id', function (t) {
gitToList(t, 'git log', 'rvagg', 'commit-stream', function (err, list) {
t.error(err, 'no error')
t.ok(list && list.length > 1, 'got a list')
t.deepEqual(list[list.length - 30], {
sha: '6c82ccd24e44167433126ba2bf4e95c8c4f41297',
authors: [
{ name: 'RafaelGSS', email: 'rafael.nunu@hotmail.com' }
],
authorDate: 'Fri Nov 22 00:19:29 2024 -0300',
author: { name: 'RafaelGSS', email: 'rafael.nunu@hotmail.com' },
summary: 'feat: add cveId support',
cveId: 'CVE-2024-12345'
}, 'got correct pr url for green-button merge')
})
})

Sorry, the diff of this file is not supported yet

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc