
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
conventional-recommended-bump
Advanced tools
Get a recommended version bump based on conventional commits.
Get a recommended version bump based on conventional commits.
Install • Usage • API • CLIGot the idea from https://github.com/conventional-changelog/conventional-changelog/pull/29
# pnpm
pnpm add conventional-recommended-bump
# yarn
yarn add conventional-recommended-bump
# npm
npm i conventional-recommended-bump
import { Bumper } from 'conventional-recommended-bump'
const bumper = new Bumper().loadPreset('angular')
const recommendation = await bumper.bump()
console.log(recommendation.releaseType) // 'major'
new Bumper(cwdOrGitClient: string | ConventionalGitClient = process.cwd())Create a new Bumper instance. cwdOrGitClient is the current working directory or a ConventionalGitClient instance.
bumper.tag(paramsOrTag: GetSemverTagsParams | string): thisSet params to get the last semver tag or set the tag directly.
bumper.commits(params: GetCommitsParams, parserOptions?: ParserStreamOptions): thisSet params to get the commits.
bumper.commits(commits: Iterable<Commit> | AsyncIterable<Commit>): thisSet the commits directly.
bumper.loadPreset(preset: PresetParams): thisLoad and set necessary params from a preset.
generator.config(config: Preset | Promise<Preset>): thisSet the config directly.
bumper.bump(whatBump?: (commits: Commit[]) => Promise<BumperRecommendation | null | undefined>): Promise<BumperRecommendation>Get a recommended version bump based on conventional commits. whatBump function is required if preset is not loaded.
conventional-recommended-bump --help
MIT © Steve Mao
semantic-release is an npm package that automates the versioning and package publishing process based on semantic versioning and conventional commit messages. It is more comprehensive than conventional-recommended-bump as it includes the entire release workflow, not just the recommendation for version bumps.
standard-version is an automated versioning tool that adheres to Semantic Versioning and uses conventional commit messages to determine version bumps. It is similar to conventional-recommended-bump but also handles the generation of changelogs and tagging of releases.
release-it is a generic CLI tool for automating versioning and package publishing. It supports conventional commits and can determine version bumps, but it also includes a wide range of release-related tasks, making it more versatile than conventional-recommended-bump.
FAQs
Get a recommended version bump based on conventional commits.
The npm package conventional-recommended-bump receives a total of 2,024,163 weekly downloads. As such, conventional-recommended-bump popularity was classified as popular.
We found that conventional-recommended-bump demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.