npmpackage.info

Gathering detailed insights and metrics for @commitlint/travis-cli

@commitlint/travis-cli

📓 Lint commit messages

19.6.1

17,038

MIT

TypeScript

9.71 kB

3,539,741 5.5

Installations

npm install @commitlint/travis-cli

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=v18

Node Version

18.20.5

NPM Version

lerna/6.4.1/node@v18.20.5+arm64 (darwin)

Score

53.7

Supply Chain

61.8

Quality

91.5

Maintenance

100

Vulnerability

96.1

License

Pull Requests

Open

18

Total

3,565

Closed

1,445

Merged

2,102

Issues

Open

160

Total

650

Closed

490

Releases

163

v19.6.1

Published on 15 Dec 2024

v19.6.0

Published on 19 Nov 2024

v19.5.0

Published on 11 Sept 2024

v19.4.1

Published on 28 Aug 2024

v19.4.0

Published on 07 Aug 2024

v19.3.1

Published on 13 May 2024

View all 163 releases

Contributors

267

View all 267 contributors

Languages

TypeScript

JavaScript

TypeScript (91.48%)

JavaScript (8.52%)

Developer

conventional-changelog

Download Statistics

Total Downloads

3,539,741

Last Day

412

Last Week

4,346

Last Month

30,724

Last Year

390,808

GitHub Statistics

17,038 Stars

2,813 Commits

914 Forks

68 Watching

22 Branches

267 Contributors

Maintainers

Package Meta Information

Latest Version

19.6.1

Package Id

@commitlint/travis-cli@19.6.1

Unpacked Size

9.71 kB

Size

3.77 kB

File Count

NPM Version

lerna/6.4.1/node@v18.20.5+arm64 (darwin)

Node Version

18.20.5

Publised On

15 Dec 2024

Total Downloads

Cumulative downloads

Total Downloads

3,539,741

Last day

-67.6%

412

Compared to previous day

Last week

-31.8%

4,346

Compared to previous week

Last month

-49%

30,724

Compared to previous month

Last year

6.6%

390,808

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@commitlint/cli tinyexec

Dev Dependencies

@commitlint/test @commitlint/utils

Versions

Lint all relevant commits for a change or PR on Travis CI

@commitlint/travis-cli

This package is a convenience wrapper around commitlint, providing zero-configuration linting of all relevant commits for a given change/build combination.

Getting started

npm install --save-dev @commitlint/travis-cli

1# .travis.yml
2script
3- commitlint-travis

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/CI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/CI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/CI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/CI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/CI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/container-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/container-build.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/container-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/container-build.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/container-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/container-build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/container-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/container-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/container-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/container-build.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/container-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-deploy.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/docs-deploy.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-deploy.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/docs-deploy.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-deploy.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/docs-deploy.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-deploy.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/docs-deploy.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-deploy.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/conventional-changelog/commitlint/docs-deploy.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile.ci:1
Warn: containerImage not pinned by hash: Dockerfile.ci:28: pin your Docker image by updating docker.io/library/node:18-alpine to docker.io/library/node:18-alpine@sha256:6eb9c3d9bd191bd2cc6ce7ec3d5ec4c2127616140c8586af96a6bec8f28689d1
Warn: containerImage not pinned by hash: Dockerfile.dev:1: pin your Docker image by updating brainpower/node-cubicle to brainpower/node-cubicle@sha256:6e49767749c600da4405b0acc7b7a7494db077f39f6464b904473d1068302542
Warn: npmCommand not pinned by hash: Dockerfile.ci:31-34
Warn: npmCommand not pinned by hash: .github/workflows/CI.yml:77
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned
Info: 0 out of 3 containerImage dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned

0

SAST

Determines if the project uses static code analysis.

Score

5.5

/10

Last Scanned on 2024-12-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More