New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

pomeranian

Package Overview
Dependencies
Maintainers
2
Versions
16
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

pomeranian

Pomeranian is a tool for detecting what parts of a project were affected in a pull request or range of commits

  • 0.1.1
  • latest
  • npm
  • Socket score

Version published
Weekly downloads
2
decreased by-75%
Maintainers
2
Weekly downloads
 
Created
Source

Installation

yarn global add pomeranian

Configuration

Create a pomeranian.yaml file at the top level of your directory structure to provide GitHub credentials and specify what directories are associated with which projects. GitHub credentials can also be supplied through the GITHUB_TOKEN environment variable. If running on AppVeyor, pomeranian can automatically detect the current pull request number.

github:
  token: [REDACTED]
  repo: ParagonTruss/ParagonCore
projects:
  sealingService:
    - servers/SealingService
  designService:
    - servers/DesignService
    - servers/libraries/AnalysisEngine

Usage

To check if a project has been changed in a given pull request:

pomeranian --project [one of the projects in pomeranian.yaml] --pullRequest [pull request number]

To check if a project has been changed since some commit:

pomeranian --project [one of the projects in pomeranian.yaml] --since [SHA hash of a commit]

To check if a single file has been changed:

pomeranian --file [the name of a file in the repo] --{pullRequest|since} [query]

FAQs

Package last updated on 02 Mar 2020

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc