conventional-release-setup
Advanced tools
conventional-release-setup - npm Package Compare versions
@@ -13,4 +13,4 @@ name: release-please | ||
| - name: Release Please | ||
| uses: google-github-actions/release-please-action@v4 | ||
| uses: googleapis/release-please-action@v4 | ||
| with: | ||
| release-type: node |
+4
-0
@@ -10,2 +10,3 @@ #!/usr/bin/env node | ||
| const utils_1 = require("./utils"); | ||
| // eslint-disable-next-line @typescript-eslint/no-require-imports | ||
| const pkg = require('../package.json'); | ||
@@ -15,2 +16,3 @@ /** | ||
| */ | ||
| // eslint-disable-next-line no-console | ||
| const log = (...args) => console.log('INFO:', ...args); | ||
@@ -38,2 +40,3 @@ /** | ||
| isGit = true; | ||
| // eslint-disable-next-line @typescript-eslint/no-unused-vars | ||
| } | ||
@@ -65,2 +68,3 @@ catch (error) { | ||
| */ | ||
| // eslint-disable-next-line @typescript-eslint/no-require-imports | ||
| const packageJson = require(packageJsonPath); | ||
@@ -67,0 +71,0 @@ packageJson.scripts = packageJson.scripts || {}; |
+18
-13
| { | ||
| "name": "conventional-release-setup", | ||
| "version": "2.2.1", | ||
| "version": "2.3.0", | ||
| "description": "Sets up package for committing/releasing with conventional commits.", | ||
@@ -10,3 +10,3 @@ "author": "Mark <mark@remarkablemark.org>", | ||
| "clean": "rm -rf lib", | ||
| "lint": "eslint --ignore-path .gitignore .", | ||
| "lint": "eslint .", | ||
| "lint:fix": "npm run lint -- --fix", | ||
@@ -32,15 +32,20 @@ "lint:tsc": "tsc --noEmit", | ||
| "devDependencies": { | ||
| "@commitlint/cli": "19.0.3", | ||
| "@commitlint/config-conventional": "19.0.3", | ||
| "@commitlint/cli": "19.4.0", | ||
| "@commitlint/config-conventional": "19.2.2", | ||
| "@eslint/compat": "1.1.1", | ||
| "@eslint/eslintrc": "3.1.0", | ||
| "@eslint/js": "9.9.1", | ||
| "@types/jest": "29.5.12", | ||
| "@typescript-eslint/eslint-plugin": "7.1.0", | ||
| "@typescript-eslint/parser": "7.1.0", | ||
| "eslint": "8.57.0", | ||
| "eslint-plugin-prettier": "5.1.3", | ||
| "husky": "9.0.11", | ||
| "@typescript-eslint/eslint-plugin": "8.3.0", | ||
| "@typescript-eslint/parser": "8.3.0", | ||
| "eslint": "9.9.1", | ||
| "eslint-plugin-prettier": "5.2.1", | ||
| "eslint-plugin-simple-import-sort": "12.1.1", | ||
| "globals": "15.9.0", | ||
| "husky": "9.1.5", | ||
| "jest": "29.7.0", | ||
| "lint-staged": "15.2.2", | ||
| "prettier": "3.2.5", | ||
| "ts-jest": "29.1.2", | ||
| "typescript": "5.3.3" | ||
| "lint-staged": "15.2.9", | ||
| "prettier": "3.3.3", | ||
| "ts-jest": "29.2.5", | ||
| "typescript": "5.5.4" | ||
| }, | ||
@@ -47,0 +52,0 @@ "files": [ |
+2
-2
@@ -50,3 +50,3 @@ # conventional-release-setup | ||
| - copies the configs: | ||
| - [.github/workflows/release-please.yml](https://github.com/google-github-actions/release-please-action) - generates changelog, bumps version, and creates git commit, tag, and release | ||
| - [.github/workflows/release-please.yml](https://github.com/googleapis/release-please-action) - generates changelog, bumps version, and creates git commit, tag, and release | ||
| - [.commitlintrc.json](https://github.com/remarkablemark/conventional-release-setup/blob/master/files/.commitlintrc.json) | ||
@@ -57,3 +57,3 @@ - adds husky hook `commit-msg` | ||
| Release is automated with [Release Please](https://github.com/google-github-actions/release-please-action). | ||
| Release is automated with [Release Please](https://github.com/googleapis/release-please-action). | ||
@@ -60,0 +60,0 @@ ## License |
New alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Fixed alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
10665
3.32%- Lines of code
173
2.37%Worsened metrics
- Dev dependency count
18
38.46%