
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
semantic-release-version-badge
Advanced tools
A plugin for semantic-release that updates version badge in README file with latest bumped version
A semantic-release plugin that updates version badge in README file with the latest released version.
npm install --save-dev semantic-release-version-badge
The plugin can be configured in the semantic-release configuration file:
{
"plugins": [
"@semantic-release/commit-analyzer",
"@semantic-release/release-notes-generator",
"semantic-release-version-badge"
]
}
| Option | Description | Default |
|---|---|---|
badgeTemplate | Template string for the version badge |  |
readmePath | Path to the README file | README.md |
{
"plugins": [
"@semantic-release/commit-analyzer",
"@semantic-release/release-notes-generator",
["semantic-release-version-badge", {
"badgeTemplate": "",
"readmePath": "./docs/README.md"
}]
]
}
The plugin runs during the prepare phase of semantic-release. It:
Contributions are welcome! Please feel free to submit a Pull Request. For major changes, please open an issue first to discuss what you would like to change.
git checkout -b feature/AmazingFeature)git commit -m 'Add some AmazingFeature')git push origin feature/AmazingFeature)# Clone the repository
git clone https://github.com/lcaparros/semantic-release-version-badge.git
# Install dependencies
npm install
# Build the project
npm run build
# Run tests
npm test
This project follows Conventional Commits specification. Each commit message must be structured as follows:
<type>[optional scope]: <description>
[optional body]
[optional footer(s)]
feat: (Minor) New feature or significant enhancementfix: (Patch) Bug fixdocs: (Patch) Documentation updatesstyle: (No Release) Code formatting changesrefactor: (Patch) Code restructuring without behavior changeperf: (Patch) Performance improvementstest: (No Release) Adding/modifying testsbuild: (Patch) Changes affecting build systemci: (No Release) Changes to CI configurationchore: (No Release) Maintenance tasksrevert: (Special) Reverts a previous commitCommon scopes include:
auth: Authentication related changesapi: API endpointsdb: Database changesemail: Email functionalitysecurity: Security featuresui: User interfacedocs: Documentationtests: Test infrastructurefeat(auth): add password reset functionality
fix(email): handle sendgrid connection timeout
docs(readme): update installation steps
style(lint): format code according to prettier rules
refactor(api): simplify error handling
For breaking changes:
! after type/scopeBREAKING CHANGE: in footerExample:
feat(auth)!: change authentication token format
BREAKING CHANGE: New token format is not backward compatible with existing clients
!) -> Major version bumpfeat -> Minor version bumpfix, perf, refactor -> Patch version bumpdocs, style, test, ci, chore -> No version bumpThis project is licensed under the Apache License 2.0 - see the LICENSE file for details.
FAQs
A plugin for semantic-release that updates version badge in README file with latest bumped version
We found that semantic-release-version-badge demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.