
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
version-manage-plugin
Advanced tools
npm i --save-dev version-manage-plugin
yarn add --dev version-manage-plugin
npm i --save-dev version-manage-plugin@0.0.4
yarn add --dev version-manage-plugin@0.0.4
最新0.0.5版本暂时删除`webpack 4`兼容
version-manage-plugin可以更好的管理你的包版本,发布时通过调用shell获得远程最新的包版本号同时智能的指引你发布的包版本。
webpack.config.js
const path = require('path');
const VWebpackPlugin = require('version-manage-plugin').default;
module.exports = {
entry: './index.js',
plugins: [
new VWebpackPlugin({
name: 'vue',
output: path.resolve(__dirname, './dist'),
registry: 'http://registry.npmjs.org/',
}),
],
output: {
filename: 'name.js',
path: path.resolve(__dirname, 'dist'),
},
};
| Name | Type | Default | Description |
|---|---|---|---|
| name | string | required | 生成的package.json中的包名称 |
| rootDir | string | required | 当前项目跟路径 |
| output | string | required | 打包后生成内容的文件夹路径 |
| registry | string | http://registry.npmjs.org/ | npm源 |
prerelease 下推送会自动在根目录提交并推送文件变成,并且生成对应 alpha 版本 Tag 同时自动提交。
version-manage-plugin还支持通过环境变量注入的方式更新包版本。
__version__plugin__mode=patch__version__plugin__mode=minor__version__plugin__mode=major__version__plugin__mode=auto当传递patch、minor、major时,会根据对应的值直接进行版本号修改跳过询问步骤。
当传递auto时,会进入版本号询问环节,支持上述三种定义以及输入自定义版本号。
默认不传递__version__plugin__mode时,开启询问模式。
FAQs
A Webpack Plugin for Better management version number.
The npm package version-manage-plugin receives a total of 1 weekly downloads. As such, version-manage-plugin popularity was classified as not popular.
We found that version-manage-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.