
Product
Announcing Bun and vlt Support in Socket
Bringing supply chain security to the next generation of JavaScript package managers
advice-animal
Advanced tools
Advice Animal answers the question of what do we do after running
cookiecutter, or how to we avoid telling people we support to run a sed script.
Existing projects such as cookiecutter do a pretty solid job of initial project generation, and ones such as ruff, fixit, and pyupgrade do a solid job of suggesting universal (that is, applicable to everyone) changes.
Advice Animal is developed to serve a central team that has opinions, but wants to leave the application of that advice up to teams owning individual repos that have the interest and time to apply it.
tox -e stylefix and amend).Using traffic light colors for simplicity:
FixConfidence.GREEN are high-confidence fixes that a) something is wrong and b) this won't make it
worse (think, formatting). Trust your tests and land these.
FixConfidence.YELLOW ought to have human review (and definitely make sure the tests run), but are
low-effort to apply (think, renaming python modules that have uppercase in them, or bumping a
version to avoid a known CVE). Meets the bar for a passing mention in release notes.
FixConfidence.RED likely need a human to pick up the baton and finish it (think: you clearly use
types, you probably should enable mypy in CI).
Usage of this library should work back to 3.7, but development (and mypy compatibility) only on 3.10-3.12. Linting requires 3.12 for full fidelity.
This library follows meanver which basically means semver along with a promise to rename when the major version changes.
advice-animal is copyright Tim Hatch, and licensed under
the MIT license. See the LICENSE file for details.
FAQs
Suggests incremental improvements for existing projects
We found that advice-animal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Bringing supply chain security to the next generation of JavaScript package managers

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies

Product
Reachability analysis for Ruby is now in beta, helping teams identify which vulnerabilities are truly exploitable in their applications.