npmpackage.info

Gathering detailed insights and metrics for @tmware/semantic-release-npm-github-publish

@tmware/semantic-release-npm-github-publish - 1.5.6 | npmpackage.info

@tmware/semantic-release-npm-github-publish

Github template for sharable configuration of semantic-release It helps with publishing to npm & github , generates changelog & release notes for any type of keywords.

1.5.6

MIT

JavaScript

11.76 kB

Installations

npm install @tmware/semantic-release-npm-github-publish

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>=18

Node Version

18.16.0

NPM Version

9.8.0 Pull Requests

Open

5

Total

47

Closed

17

Merged

25

Issues

Open

0

Total

0

Closed

0

Releases

v1.5.6

Updated on Jul 18, 2023

v1.5.5

Updated on Sep 03, 2022

v1.5.4

Updated on Jun 24, 2022

v1.5.3

Updated on Jun 24, 2022

v1.5.2

Updated on Mar 24, 2022

v1.5.1

Updated on Mar 21, 2022

View All 11 releases

Languages

JavaScript

JavaScript (100%)

Developer

TMWare

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

134 Commits

11 Branches

Updated on Oct 05, 2023

Maintainers

View All 1 Contributors

Package Meta Information

Latest Version

1.5.6

Package Id

@tmware/semantic-release-npm-github-publish@1.5.6

Unpacked Size

11.76 kB

Size

4.31 kB

File Count

NPM Version

9.8.0

Node Version

18.16.0

Published on

Jul 18, 2023

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

semantic-release-npm-github-publish

Semantic-release shareable configuration for easy publishing to NPM, Github or Github Package Registry.

About

This sharable configuration conforms to angular standard

Using @semantic-release/commit-analyzer ensures that commits are conformed to the conventional commits specification.
- PATCH version created if any of build, ci, chore, docs, refactor, style, test commit types pushed to master
- MINOR version created if fix commit type pushed
- MAJOR version created if feat commit type pushed
Publishes the new version to NPM.
Bumps a version in package.json.
Generates or updates a changelog file including all PATCH keywords (not included in default angular package).
Releases new release for NPM & Github.

This repository can be also used as a template repository for creation of sharable semantic-release configurations.

Install

Install semantic-release:

1npm install --save-dev semantic-release

Add semantic-release to scripts:

1"scripts": {
2	"semantic-release": "semantic-release"
3}

Install semantic-release-npm-github-publish:

1npm install --save-dev @tmware/semantic-release-npm-github-publish

Add npx semantic-release to a "Release" step of your CD setup

Usage

To use this sharable config, extend your semantic release configuration in .releaserc.yaml:

1branch: master
2ci: false
3dryRun: false
4debug: false
5extends: "@tmware/semantic-release-npm-github-publish"

Contributing

Contributions, issues and feature requests are welcome!
Feel free to check issues page.

Build with

This README was generated with ❤️ by readme-md-generator

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

7

SAST

Determines if the project uses static code analysis.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/TMWare/semantic-release-npm-github-publish/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/TMWare/semantic-release-npm-github-publish/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/TMWare/semantic-release-npm-github-publish/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/TMWare/semantic-release-npm-github-publish/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/TMWare/semantic-release-npm-github-publish/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/TMWare/semantic-release-npm-github-publish/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/TMWare/semantic-release-npm-github-publish/test-release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/TMWare/semantic-release-npm-github-publish/test-release.yml/master?enable=pin
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

3

/10

Last Scanned on 2025-07-14

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

@tmware/semantic-release-npm-github-publish

Installations

Developer Guide

No

CommonJS

>=18

18.16.0

9.8.0

Pull Requests

5

47

17

25

Issues

0

0

0

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Dev Dependencies

semantic-release-npm-github-publish

About

Install

Usage

Contributing

Build with

10

10

10

7

1

0

0

0

0

0

0

0

0

3

/10