
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
When you need trusted news, you turn to an anchorman.
Simply put, Anchorman scans your commit log and builds release notes for your project.
These notes are build in Markdown and live in a release_notes
directory off of your project root. The expected usage is to have one file per release, named appropriately, in this directory. When viewed locally they will be readable. When viewed on Github they will be rendered as nice HTML.
There is also an option to generate HTML versions of these files using Github Flavored Markdown for posting/hosting elsewhere.
If the repo is cloned from Github commit SHAs will be linked to Github's commits page.
If a commit message includes syntax for manipulating a story at Pivotal Tracker's via a post-commit hook, the story id will be linked to Tracker.
Add this line to your application's Gemfile:
gem 'anchorman'
And then execute:
$ bundle
Or install it yourself as:
$ gem install anchorman
Anchorman is fairly simple-minded. It generates files with a little bit of formatting, but not much. The resulting files are meant as good starting points for more human-readable release notes.
$ anchorman notes
Generates a release_notes/release_notes.md
off of the root of your project. Has a simple header and will have a bullet list of commit information from your entire repo.
$ anchorman notes --from=<ref> --to=<ref>
Builds notes only for commits between two git refs. If not supplied, to
defaults to HEAD
. Can be combined with other options.
$ anchorman notes --name=<filename>
Writes out notes to release_notes/<filename>.md
. Can be combined with other options.
$ anchorman html
Builds release_notes/html
with html versions of all Markdown files in release_notes
Samples can be found in this repository.
Notes live in the repo. Generated with Anchorman and then made readable and useful to humans.
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that anchorman demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.