
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
commitlint-config-non-conventional
Advanced tools
Shared commitlint config to enforce a good commit message
Shared commitlint config to enforce a good commit message
This config disllows the usage of conventinal style commits. Sometimes all you need is just a proper commit messages with rules enforced.
A commit message or commit title should
If the commit message has a body and footer. They should have 2 blank leading lines and should not exceed 72 characters. The description(body) should be sentence cased.
npm i -D @commitlint/cli commitlint-config-non-conventional
// commitlint.config.js
module.exports = {
extends: 'non-conventional',
};
# Install husky
npm i -D husky
# Activate husky hooks
npx husky install
# Add commit-msg hook
npx husky add .husky/commit-msg 'npx --no -- commitlint --edit "$1"'
Checkout the husky documentation on how to automatically install git hooks post installation.
v1.0.1 (2021-12-08)
FAQs
Shared commitlint config to enforce a good commit message
The npm package commitlint-config-non-conventional receives a total of 94 weekly downloads. As such, commitlint-config-non-conventional popularity was classified as not popular.
We found that commitlint-config-non-conventional demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.