Gathering detailed insights and metrics for tuanddd-get-github-info
Gathering detailed insights and metrics for tuanddd-get-github-info
Gathering detailed insights and metrics for tuanddd-get-github-info
Gathering detailed insights and metrics for tuanddd-get-github-info
🦋 A way to manage your versioning and changelogs with a focus on monorepos
npm install tuanddd-get-github-info
Typescript
Module System
Node Version
NPM Version
@changesets/get-release-plan@4.0.13
Updated on Jun 20, 2025
@changesets/assemble-release-plan@6.0.9
Updated on Jun 20, 2025
@changesets/cli@2.29.5
Updated on Jun 20, 2025
@changesets/cli@2.29.4
Updated on May 12, 2025
@changesets/get-release-plan@4.0.12
Updated on May 12, 2025
@changesets/assemble-release-plan@6.0.8
Updated on May 12, 2025
TypeScript (99.85%)
JavaScript (0.15%)
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
MIT License
10,359 Stars
631 Commits
666 Forks
36 Watchers
50 Branches
155 Contributors
Updated on Jul 18, 2025
Latest Version
0.4.4
Package Id
tuanddd-get-github-info@0.4.4
Unpacked Size
33.76 kB
Size
6.27 kB
File Count
11
NPM Version
6.12.1
Node Version
12.13.1
Cumulative downloads
Total Downloads
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
2
Get the GitHub username and PR number from a commit. Intended for use with changesets.
Note: This assumes you already have changesets setup.
To use @changesets/get-github-info
, you'll need to install it and you'll probably also want dotenv
to provide a GitHub personal access token via a .env
file.
1yarn add --dev @changesets/get-github-info dotenv
or
1npm install --save-dev @changesets/get-github-info dotenv
Then you can use it in your .changeset/config.js
like this.
1require("dotenv").config(); 2const { getInfo } = require("@changesets/get-github-info"); 3 4// ... 5 6const getReleaseLine = async (changeset, type) => { 7 const [firstLine, ...futureLines] = changeset.summary 8 .split("\n") 9 .map(l => l.trimRight()); 10 // getInfo exposes the GH username and PR number if you want them directly 11 // but it also exposes a set of links for the commit, PR and GH username 12 let { user, pull, links } = await getInfo({ 13 // replace this will your own repo 14 repo: "Noviny/changesets", 15 commit: changeset.commit 16 }); 17 let returnVal = `- ${links.commit}${ 18 links.pull === null ? "" : ` ${links.pull}` 19 }${links.user === null ? "" : ` Thanks ${links.user}!`}: ${firstLine}`; 20 if (futureLines.length > 0) { 21 returnVal += `\n${futureLines.map(l => ` ${l}`).join("\n")}`; 22 } 23 return returnVal; 24}; 25 26// ...
You'll need to get a GitHub personal access token with read:user
and repo:status
permissions, and add it to a .env
file.
1GITHUB_TOKEN=token_here
You can now bump your packages and changelogs with changeset bump
and it'll have the GitHub info. 🎉
1type Info = { 2 user: string | null; 3 pull: number | null; 4 links: { 5 commit: string; 6 pull: string | null; 7 user: string | null; 8 }; 9}; 10 11type Options = { 12 commit: string; 13 repo: string; 14}; 15 16export function getInfo(options: Options): Info { 17 // magic... 18}
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
Reason
Found 20/21 approved changesets -- score normalized to 9
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
9 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8
Reason
security policy file detected
Details
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
Reason
project is not fuzzed
Details
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
Reason
22 existing vulnerabilities detected
Details
Score
Last Scanned on 2025-07-14
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More