
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
emojinal-commitment
Advanced tools
Git commit-msg hook to automatically bring some emojion to commit messages.
Git commit-msg hook to automatically bring some emojion to commit messages.
Assumes Conventional Commits with commit types roughly based on (a subset of) the Angular commit message format.
fix: broken thing now works->🐛 broken thing now works
type: prefix:
fix broken thing->🐛 fix broken thing
:emoji_shortcodes: to unicode emoji characters (for nicer display in terminals too, e.g. git log)
initial commit :tada:->initial commit 🎉
npm install emojinal-commitment --save-dev
# configure git commit-msg hook to call `npx emojinal-commitment`
# ..here we use husky to manage git hooks:
npm install husky --save-dev
npm set-script prepare "husky install"
npm run prepare
# add the hook: (slightly complex to work around npx bug - see below)
npx --package=husky -c "husky add .husky/commit-msg 'npx emojinal-commitment \"\$1\"'"
# commit updated dev dependencies and the .husky/commit-msg git hook to your repo
git add .husky/commit-msg package*.json
git commit -m "build: process commit messages with emojinal-commitment"
# `emojinal-commitment` will run every time you commit
At the time of writing, npx has a bug not passing through escaped command arguments - so we can't simply run npx husky add commit-msg 'npx emojinal-commitment $1'. See https://github.com/typicode/husky/issues/1019, https://github.com/npm/cli/issues/3067.
<type>: commit message-><emoji> commit message
Roughly based on (a subset of) the Angular commit message format - although not every commit needs a <type>: prefix, and not every type prefix needs an emoji..see philosophy, below
| Emoji | Type prefix(es) | Description |
|---|---|---|
| ✨ | feat feature | New feature |
| 🐛 | fix | Bug fix |
| 🏎 | perf | A code change that improves performance |
| ♻️ | refactor | A code change that neither fixes a bug nor adds a feature |
| 🚥 | test tests | Add or fix tests |
| 💅 | tidy polish style | Tidy/prettify code |
| Emoji | Type prefix(es) | Description |
|---|---|---|
| 📚 | docs doc | Documentation-only changes |
| 🛠️ | build | Changes that affect the build system or external dependencies |
| 🤖 | ci | Changes to our CI configuration files and scripts |
We intentionally avoid doing anything for other commit types - see below. Not every commit needs an emoji..
chore: - should be of little significance, not something to draw attention to while reviewing historic commits. Encourage the use of more descriptive types - or simply no type prefix for small things. (Just describe the change, don’t need make a big deal of it - it’s an advantage to make it appear of secondary importance in the commit history).vX.X.X. Self-explanatory, no additional annotation required.feat|fix|refactor..). If doing a merge commit (--no-ff), stick with standard GitHub convention Merge pull request #xx from <repo/branch>. (The story will be told by the individual commits and their commit messages, which is where we wish to draw attention.)Revert ‘<original commit id>’ - a revert typically represents a small step backwards. If we're reverting a significant feature/behaviour, we'd expect to see an appropriately descriptive commit message - the revert itself is likely a (temporary) 🐛 fix:..Finally - to be used by people with a healthy disregard for rules(!) If you wish to sprinkle your commits with emoji on occasion, this package isn't here to police that.. (that's why we also rewrite :shortcodes: and provide flexibility when no <type>: prefix is given). But do try to use sparingly, appreciating the intent of Conventional Commits and the philosophy above.. :wink:
en-space characters to provide pleasing visual spacing when displayed on GitHub etcOf note, “refactoring” describes more than just cutting/pasting code around - it also encompasses many implementation changes (that don’t affect external behaviour) - e.g. underlying algorithm changes or rewrites. “Refactoring is intended to improve the design, structure, and/or implementation” - https://en.wikipedia.org/wiki/Code_refactoring ↩
FAQs
Git commit-msg hook to automatically bring some emojion to commit messages.
We found that emojinal-commitment demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.