npmpackage.info

Gathering detailed insights and metrics for commitlint-config-gitmoji

commitlint-config-gitmoji

😉 Gitmoji Commit Workflow

2.3.1

220

MIT

TypeScript

2,387,762 3.4

Installations

npm install commitlint-config-gitmoji

Pull Requests

Open

2

Total

625

Closed

526

Merged

97

Issues

Open

12

Total

53

Closed

41

Releases

130

conventional-changelog-gitmoji-config@1.5.2

Published on 12 Jun 2023

semantic-release-config-gitmoji@1.5.3

Published on 12 Jun 2023

semantic-release-config-gitmoji@1.5.2

Published on 10 Jun 2023

conventional-changelog-gitmoji-config@1.5.1

Published on 10 Jun 2023

semantic-release-config-gitmoji@1.5.1

Published on 10 Jun 2023

conventional-changelog-gitmoji-config@1.5.0

Published on 10 Jun 2023

View all 130 releases

Developer

arvinxx

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

Yes

Node Version

16.19.0

NPM Version

7.24.2 Statistics

220 Stars

643 Commits

27 Forks

3 Watching

2 Branches

10 Contributors

Updated on 25 Nov 2024

Languages

TypeScript (92.65%)

Handlebars (4.92%)

JavaScript (2.21%)

Shell (0.23%)

Total Downloads

Cumulative downloads

Total Downloads

2,387,762

Last day

124.1%

7,938

Compared to previous day

Last week

14%

33,705

Compared to previous week

Last month

-0.6%

133,484

Compared to previous month

Last year

293.3%

1,455,371

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@commitlint/types @gitmoji/commit-types @gitmoji/parser-opts commitlint-plugin-gitmoji

Dev Dependencies

@commitlint/lint

Versions

😉 Use gitmoji commit in your workflow

Gitmoji Commit Workflow

What is Gitmoji Commit Workflow?

English(TODO) | 中文

Template

Refer to this repository to get a template of Gitmoji Commit Workflow

Packages

Shareable Configuration

Here are some packages for gitmoji commit workflow

Packages	Status	Description
commitlint-config-gitmoji		a shareable commitlint configuration to enforcing gitmoji commit
conventional-changelog-gitmoji-config		a shareable conventional-changelog configuration to generate changelog of gitmoji commit
semantic-release-config-gitmoji		a shareable conventional-changelog configuration to generate changelog of gitmoji commit

Helper

Packages	Status	Description
commitlint-plugin-gitmoji		a commitlint plugin to add gitmoji check rule
@gitmoji/parser-opts		a shareable parser options for gitmoji styles commit
@gitmoji/commit-types		gitmoji styles commit types
@gitmoji/gitmoji-regex		a gitmoji regex

About this Repo

The commitlint gitmoji repo is managed as a monorepo; it's composed of many npm packages.

The original commitlint-config-gitmoji repo can be found in packages/config.

License

MIT ® Arvin Xu

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/test.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/test.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/arvinxx/gitmoji-commit-workflow/test.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/release.yml:56
Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

3.4

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More