
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
conventional-changelog-conventionalcommits
Advanced tools
Conventionalcommits.org preset for conventional-changelog.
A concrete implementation of the specification described at conventionalcommits.org for automated CHANGELOG generation and version management.
# yarn
yarn add -D conventional-changelog-conventionalcommits
# pnpm
pnpm add -D conventional-changelog-conventionalcommits
# npm
npm i -D conventional-changelog-conventionalcommits
Use the Conventional Changelog CLI Usage with the -p conventionalcommits option.
If you want to use this package directly and pass options, you can use the Conventional Changelog CLI Usage and with the --config or -n parameter, pass a js config that looks like this:
import createPreset from 'conventional-changelog-conventionalcommits'
createPreset({
issuePrefixes: ['TEST-'],
issueUrlFormat: 'https://myBugTracker.com/{{prefix}}{{id}}'
}).then((config) => {
// do something with the config
})
or json config like that:
{
"options": {
"preset": {
"name": "conventionalcommits",
"issuePrefixes": ["TEST-"],
"issueUrlFormat": "https://myBugTracker.com/{{prefix}}{{id}}"
}
}
}
This last json config way passes the preset object to the conventional-changelog-preset-loader package, that in turn, passes this same preset object as the config for the conventional-changelog-conventionalcommits.
See conventional-changelog-config-spec for available configuration options.
| Option | Description |
|---|---|
| ignoreCommits | Regular expression to match and exclude commits from the changelog. Commits matching this pattern will be ignored. |
| types | Array of commit type objects defining which types to include in the changelog. Hidden types are excluded from the changelog but may still trigger version bumps. Default value accessible via DEFAULT_COMMIT_TYPES export. |
| bumpStrict | When true, version bumps occur only for breaking changes or non-hidden commit types. When false (default), any commit can trigger a version bump. |
| scope | String or array of scope names to filter commits. Only commits with matching scopes will be included. When scopeOnly is false (default), commits without any scope are also included. |
| scopeOnly | When true and scope is specified, excludes commits that have no scope. When false (default), includes both scoped and unscooped commits when filtering by scope. |
standard-version is a utility for versioning using semver and CHANGELOG generation powered by conventional-changelog. It automates the versioning process and generates a changelog based on the conventions outlined in the Conventional Commits specification. It is similar to conventional-changelog-conventionalcommits but includes additional features for versioning and releasing.
lerna-changelog is a changelog generator for monorepos that use Lerna. It's tailored for repositories that use the Lerna tool and can group changes by Lerna packages. While it also generates changelogs based on commit messages, it is specifically designed for monorepo workflows and may not be as flexible as conventional-changelog-conventionalcommits for other types of projects.
semantic-release automates the whole package release workflow including determining the next version number, generating the release notes, and publishing the package. It uses the Conventional Commits specification to determine version bumps and changelog content. It provides a more comprehensive solution compared to conventional-changelog-conventionalcommits, which focuses solely on changelog generation.
FAQs
Conventionalcommits.org preset for conventional-changelog.
The npm package conventional-changelog-conventionalcommits receives a total of 7,286,647 weekly downloads. As such, conventional-changelog-conventionalcommits popularity was classified as popular.
We found that conventional-changelog-conventionalcommits demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.