
Product
Introducing .NET Support in Socket
Socket now supports .NET (Beta), bringing supply chain security and SBOM accuracy to NuGet and MSBuild-powered C# projects.
npm-scripts-conventional-changelog
Advanced tools
Configuration for npm-scripts-config where conventional-changelog, commitlint and commitizen are ready to use.
Configuration for npm-scripts-config where conventional-changelog, commitlint and commitizen are ready to use.
This configuration expose three commands:
commitizen, commitlint and conventional-changelog are configured to follow angular conventions.
npm install --save-dev npm-scripts-config npm-scripts-conventional-changelog
Create a new file that will load the configuration from this package.
.scriptsrc
{
"@extends": "npm-scripts-conventional-changelog"
}
In your project you still need to specify which rules you want to use for commitlint
and commitizen
, but packages will already be installed. To specify those rules you need to create update the package.json and create a commitlint.config.js files:
package.json
{
[...]
"scripts": {
"commit": "npm-scripts-config commit",
"commitmsg": "npm-scripts-config commitmsg",
"version": "npm-scripts-config version",
"preview-changelog": "npm-scripts-config preview-changelog"
},
"config": {
"commitizen": {
"path": "cz-conventional-changelog"
}
},
[...]
}
commitlint.config.js
module.exports = {
extends: ["@commitlint/config-conventional"]
}
FAQs
Configuration for npm-scripts-config where conventional-changelog, commitlint and commitizen are ready to use.
The npm package npm-scripts-conventional-changelog receives a total of 5 weekly downloads. As such, npm-scripts-conventional-changelog popularity was classified as not popular.
We found that npm-scripts-conventional-changelog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports .NET (Beta), bringing supply chain security and SBOM accuracy to NuGet and MSBuild-powered C# projects.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.