Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

git-package

Package Overview
Dependencies
Maintainers
1
Versions
5
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

git-package

Manage npm package versions in private git repos

  • 0.3.0
  • npm
  • Socket score

Version published
Weekly downloads
4
Maintainers
1
Weekly downloads
 
Created
Source

git-package

git-package allows you to manage releases backed by private git-repos while keeping your history clean.

npm dependencies that point to git repos must have their compiled code checked-in. In order to keep history clean, git-package creates release branches where compiled files are removed from .gitignore.

Prerequisites

  • A remote named origin.
  • SSH keys configured properly to access private git repo.

Usage

  • Add git-package to your package

    $ npm install --dev git-package

  • Add git-package config to your package.json file specifying the folder containing compiled code

    // fancy-private-pkg/package.json

    { ... "gitPackage": { "includeIgnored": [ "lib" ] } }

  • Add your compiled code folder to .gitignore, and commit normally in master branch.

  • Run git-package

    $ npm run git-package minor

    This will do the following:

    • Ensure that the command is run from master branch.
    • Run npm run build.
    • Bump package.json with the specified semver component: major/minor/patch.
    • Create a commit in master branch containing package.json version bump.
    • Create a release/vX.X.X branch.
    • Remove specified folders from .gitgnore.
    • Create a commit containing compiled code.
    • Tag it as vX.X.X.
    • Push master, release/vX.X.X and vX.X.X tag.
  • You can now from another project, point to that private repo by adding this to package.json file:

    // another-project/package.json

    { "fancy-private-project": "git+ssh://git@github.com/your-org/fancy-private-pkg#v1.2.3", }

FAQs

Package last updated on 13 Jun 2018

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc