
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
release-notes
Advanced tools
Generate markdown from all of the PRs that have been closed since your last release!
Originally used to generate notes for zapier-platform-cli and its related repos.
In its simplest form, invoking this pulls the names of all of the closed PRs since the last time the given repo had a release. If passed multiple repos, it'll use the most recent release of the first as the date to filter against.
For more info, run:
% release-notes -h
Currently, this is only set up to pull from Github. It can be expanded to use other providers if there's interest though!
If you need to access private repos, use either the -t
flag or set your GITHUB_API_TOKEN
before invoking the CLI.
In addition to a CLI, this package exports two functions for use javascript:
The main method, this does calls to the github API and returns an object with a list of closed PRs grouped by repo name.
Takes the above object of PRs and returns a nicely formatted markdown file. This is separate so if you want to build/parse the output yourself, it's easy to do.
It accepts an object with the following keys as the second parameter (all of which are optional):
Key | Type | Description |
---|---|---|
keepOrg | boolean | if true, list the repo as <ORG>/<REPO> instead of <REPO> . Defaults to false |
order | string[] | print the repos in this order (which can be different than the supplied order) |
version | string | pre-fills the version number. Prints MAJOR.MINOR.PATCH if missing |
1.0.1
package.json
FAQs
Generate release notes from recent pull requests
We found that release-notes demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.