Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
grunt-github-manifest
Advanced tools
Saves to file the commit history for a Github project from a specified date
Creates a manifest file from the Github commit log since a given date
This plugin requires Grunt ~0.4.1
npm install grunt-github-manifest --save-dev
This plugin will grab the commit log from Github from a specified date, and store this to a file. The date is either hardcoded (using the commitHistoryStartDate.date property in the config) or retrieved from a http web service.
This plugin requires a config sections named package-github-data
passed into grunt.initConfig()
.
grunt.initConfig({
create-manifest: {
options: {
commitHistoryStartDate: {
url: "http://localhost:3000/deployment-info",
path: "$.lastModifiedOn"
date: null
},
manifestPath: "commit_history.json",
github: {
o_auth_token: "XXXXXXXX",
user: "christriddle",
repo: "grunt-github-manifest",
proxy: null
},
summarised: false,
}
}
})
commitHistoryStartDate
- the commit history start date is usually used to get all commits from the last deploy
url
- Url that returns JSON data that contains the a date which can be used as the commit history start datepath
- Location of date in the returned JSON data, using JSONPathdate
- [OPTIONAL] This date will be used as the commit history start date if specifiedmanifestPath
- Where to save the manifest filegithub
- The user/repo combination to get the commit history from
user
repo
o_auth_token
proxy
- Full url including portsummarised
- Save only commit author, email, message, and url to manifest fileFAQs
Saves to file the commit history for a Github project from a specified date
The npm package grunt-github-manifest receives a total of 2 weekly downloads. As such, grunt-github-manifest popularity was classified as not popular.
We found that grunt-github-manifest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.