
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
updater-git-tags
Advanced tools
Update missing git tags.

Update is a new, open-source developer framework for automating updates of any kind to code projects. All actual updating is done plugins called "updaters", like this one.
Updaters can be run from the command line when Update's CLI is installed globally, or they can be used as building blocks for creating other updaters.
For more information:
Tasks are modularized in an effort to make it as easy as possible for you to create your own a-la-carte updater experience. As such:
Running tasks
To run a task, just run $ update git-tags: followed by the name of the task to run. For example, either of the following commands can be used to run the git-tags task:
$ update updater-git-tags:git-tags
$ update updater-git-tags:default
Update the git tags for a project. This task is an alias for the git-tags task, to allow running this updater with the following command:
Example
$ update git-tags
Update the git tags for a project. Also aliased as the default task. This will only find missing git tags if there is a git commit with a version number.
Example
$ update git-tags:git-tags
It's never too early to begin running unit tests. When you're ready to get started, the following command will ensure the project's dependencies are installed then run all of the unit tests:
$ npm install && test
If you're tests are passing and you're ready to publish your project to npm, you can do that now with the following command:
Are you sure you're ready?!
$ npm publish
Are you using Update in your project? Have you published an updater and want to share your Update project with the world?
Here are some suggestions!
#updatejs (not @)updater-git-tagsupdatejs tag in questions)updateupdater to package.json.Pull requests and stars are always welcome. For bugs and feature requests, please create an issue.
Install dev dependencies:
$ npm install -d && npm test
Brian Woodward
Copyright © 2016, Brian Woodward. Released under the MIT license.
This file was generated by verb-generate-readme, v0.2.0, on November 01, 2016.
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.