
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
stringify-changelog
Advanced tools
Generate a markdown-formatted changelog from an object, array, yaml or json file.
Generate a markdown-formatted changelog from an object, array, yaml or json file.
Converts valid YAML, like this:
v0.1.0:
date: "2016-12-26"
changed:
- Got stuck in another chimney.
Into this:
### [v0.1.0] - 2016-12-26
**changes**
- Got stuck in another chimney.
Install with npm:
$ npm install --save stringify-changelog
var changelog = require('stringify-changelog');
changelog(value, options);
Params
value
{String|Object|Array}: File path of YAML file to read, object or array of changes (see below)options
{Object}: the following options may be passed to modify output
format
{Function} Custom function for formatting each entry in the changelogkey
{Function} Prepend the following key/reference to your generated changelog, to guide users in making semantically labeled entries.Example key
## key
Changelog entries are classified using the following labels from [keep-a-changelog][]:
- `added`: for new features
- `changed`: for changes in existing functionality
- `deprecated`: for once-stable features removed in upcoming releases
- `removed`: for deprecated features removed in this release
- `fixed`: for any bug fixes
[keep-a-changelog]: https://github.com/olivierlacan/keep-a-changelog
Conventions from [keep-a-changelog][] are supported by default. When data is passed as an object or array (from a file or directly), changelog entries can be categorized using the following labels as property names:
added
for new features.changed
for changes in existing functionality.deprecated
for once-stable features removed in upcoming releases.removed
for deprecated features removed in this release.fixed
for any bug fixes.security
to invite users to upgrade in case of vulnerabilities.Data can either be formatted as an array or an object.
Object
JSON
{ 'v0.1.0':
{ date: '2016-12-26',
changed: [ 'Got stuck in another chimney.' ] } }
YAML
v0.1.0:
date: "2016-12-26"
changed:
- Got stuck in another chimney.
Array
JSON
[ { date: '2016-12-26',
version: 'v0.1.0',
changed: [ 'Got stuck in another chimney.' ] } ]
YAML
- version: v0.1.0
date: '2016-12-26'
changed:
- Got stuck in another chimney.
If you don't want to follow keep-a-changelog format, or you have an arbitrary entry that doesn't fit in one of the above categories, you can use the description
property.
Array
[ { date: '2016-12-26',
version: 'v0.1.0',
description: [ 'Got stuck in another chimney.' ] } ]
Object
{ 'v0.1.0':
{ date: '2016-12-26',
description: [ 'Got stuck in another chimney.' ] } }
helper-changelog: Template helper for generating a markdown-formatted changelog from an object, array or yaml file. | homepage
Pull requests and stars are always welcome. For bugs and feature requests, please create an issue.
Install dev dependencies:
$ npm install -d && npm test
Jon Schlinkert
Copyright © 2016, Jon Schlinkert. Released under the MIT license.
This file was generated by verb, v0.9.0, on July 21, 2016.
FAQs
Generate a markdown-formatted changelog from an object, array, yaml or json file.
We found that stringify-changelog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.