
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Tool for publishing releases to github and npm according to Semantic Versionin.

🎁Wisdom does next things:
$wisdom_version and $WISDOM_VERSION with future versionscripts.wisdom of package.json (if exist);scripts.wisdom:type of package.json (if exist);package.json;scripts.wisdom:done of package.json (if exist);package.json should contain next properties,
when publish enabled:
{
"publishConfig": {
"access": "public"
}
}
when releases enabled:
repository field should be set:
{
"repository": {
"type": "git",
"url": "git://github.com/coderaiser/wisdom.git"
}
}
Before executing wisdom, wisdom:type and wisdom:done scripts will be expanded via redrun which will speed things up.
Here is list of commands that should be executed to get same result:
changelog {{ version }}
version {{ version }}
git add --all
git commit -m "feature(package) v{{ version }}"
git push origin {{ branch }}
git tag v{{ version }}
git push origin v{{ version }}
grizzly -tn "token from url" \
-r grizzly -o {{ owner }} -t {{ version }} \
-n "{{ repo }} {{ version }}" -b "changelog"
npm publish
npm i wisdom -g
$ wisdom
Usage: wisdom [patch|minor|major]
Options:
--dry-run show tasks to run without actually running
--force do not ask before publishin major
-h, --help display this help and exit
-v, --version output version information and exit
When you need configure wisdom you could declare them in package.json (with defaults set):
{
"changelog": true,
"commitType": "colon|paren",
"tag": true,
"release": true,
"releaseTriesCount": 10,
"private": false,
"branch": "master",
"scripts": {
"wisdom": "echo 'do something before starting'",
"wisdom:type": "echo 'do something before starting and add --patch, --minor or --major argument'",
"wisdom:build": "echo 'do something before publish'",
"wisdom:done": "echo 'do something after publish'"
}
}
MIT
FAQs
configurable publish releases to github and npm
We found that wisdom demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.