
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
cz-customizable
Advanced tools
Commitizen customizable adapter following the conventional-changelog format.
This is a customizable Commitizen plugin. You can specify the commit types, scopes and override scopes for specific types.
install commitizen in case you don't have it: npm install -g commitizen
install the cz-customizable: npm install cz-customizable --save-dev
configure commitizen
to use cz-customizable
as plugin. Add those lines to your package.json
:
...
"config": {
"commitizen": {
"path": "node_modules/cz-customizable"
}
}
you should commit your .cz-config.js
file to your git. Run cp ./node_modules/cz-customizable/cz-config-EXAMPLE.js ./.cz-config.js
in a project root directory to get a template.
node_modules/cz-customizable/cz-config-EXAMPLE.js
From now on, instead of git commit
you type git cz
and let the tool do the work for you.
Hopefully this will help you to have consistent commit messages and have a fully automated deployemnt without any human intervention.
It prompts for conventional changelog standard.
backticks
If you wish to have backticks in your content, for example "feat: `string`", the commit preview will be "feat: \\string\\\\
".
Don't worry because on your git log
will be "feat: `string`" as desired.
multiline contents on the body of the message
Body is the only place where you can use a pipe
to break lines.
E.g.: you type this: my items are:| - item01| - item 02
, which will become:
my items are:
- item01
- item 02
Please refer to the Contributor Guidelines and Conduct of Code from AngularJs project.
Leonardo Correa
FAQs
Commitizen customizable adapter following the conventional-changelog format.
The npm package cz-customizable receives a total of 62,033 weekly downloads. As such, cz-customizable popularity was classified as popular.
We found that cz-customizable demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.