
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
conventional-changelog-eslint
Advanced tools
conventional-changelog eslint preset.
Issues with the convention itself should be reported on the ESLint issue tracker.
# yarn
yarn add -D conventional-changelog-eslint
# pnpm
pnpm add -D conventional-changelog-eslint
# npm
npm i -D conventional-changelog-eslint
Our commit message format is as follows:
Tag: Short description (fixes #1234)
Longer description here if necessary
The first line of the commit message (the summary) must have a specific format. This format is checked by our build tools.
The Tag is one of the following:
Fix - for a bug fix.Update - either for a backwards-compatible enhancement or for a rule change that adds reported problems.New - implemented a new feature.Breaking - for a backwards-incompatible enhancement or feature.Docs - changes to documentation only.Build - changes to build process only.Upgrade - for a dependency upgrade.Chore - for refactoring, adding tests, etc. (anything that isn't user-facing).Use the labels of the issue you are working on to determine the best tag.
The message summary should be a one-sentence description of the change, and it must be 72 characters in length or shorter. If the pull request addresses an issue, then the issue number should be mentioned at the end. If the commit doesn't completely fix the issue, then use (refs #1234) instead of (fixes #1234).
Here are some good commit message summary examples:
Build: Update Travis to only test Node 0.10 (refs #734)
Fix: Semi rule incorrectly flagging extra semicolon (fixes #840)
Upgrade: Esprima to 1.2, switch to using comment attachment (fixes #730)
The commit message format is important because these messages are used to create a changelog for each release. The tag and issue number help to create more consistent and useful changelogs.
Based on https://eslint.org/docs/developer-guide/contributing/pull-requests#step2
This package is a preset for conventional-changelog that follows the AngularJS commit message conventions. It is similar to conventional-changelog-eslint in that it provides a specific set of rules for generating changelogs, but it is tailored for Angular projects instead of ESLint.
This package provides a preset for conventional-changelog based on the Conventional Commits specification. It is more generic compared to conventional-changelog-eslint, which is specifically for ESLint projects. This package can be used for a wider range of projects that adhere to the Conventional Commits standard.
Standard Version is a tool that automates versioning and changelog generation based on conventional commit messages. It is similar to conventional-changelog-eslint in that it helps manage changelogs, but it also includes version bumping and Git tagging functionalities.
FAQs
ESLint preset for conventional-changelog.
The npm package conventional-changelog-eslint receives a total of 1,541,664 weekly downloads. As such, conventional-changelog-eslint popularity was classified as popular.
We found that conventional-changelog-eslint demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.