Security News
Oracle Drags Its Feet in the JavaScript Trademark Dispute
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
gist-audit-maker
Advanced tools
In keeping track of commits that need auditing for backport in Node.js, the current best approach is to maintain and update a gist with the commits.
This package allows for automatic updating of this gist.
Set the following environment variables, as these are needed to authenticate @octokit/rest
for gist fetching and updating
export USERNAME=<your github username>
export PASSWORD=<your github password>
This tool will look for a file named according to the following format: audit-v[VERSION]-[SEMVER].md
, where version is a Node version such as audit-v10-patch.md
or audit-v11-minor.md
. If a gist with this name pattern doesn't exist, this tool will create it for you and then update it on future runs.
Install gist-audit-maker
globally:
$ npm i -g gist-audit-maker
This tool must be run from your local clone of the core nodejs/node
repository. It takes three arguments:
branch
- the target branch for auditingsemver
- whether you would like to see either semver-minor
or semver-patch
commits (possible values are minor
or patch
)fork
- whether or not the repo in which this is being run is a fork (defaults to false
)Examples:
$ cd /path/to/node
$ gist-audit-maker --branch=v10.x --semver=patch --fork=true
$ cd /path/to/node
$ gist-audit-maker --branch=v11.x --semver=minor
You could also run it with npx
, like so:
$ cd /path/to/node
$ npx gist-audit-maker --branch=v10.x --semver=minor --fork=false
FAQs
create and update audit lists for node backports
The npm package gist-audit-maker receives a total of 3 weekly downloads. As such, gist-audit-maker popularity was classified as not popular.
We found that gist-audit-maker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
Security News
The Linux Foundation is warning open source developers that compliance with global sanctions is mandatory, highlighting legal risks and restrictions on contributions.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.