@programinglive/commiter 1.2.12 โ 1.2.16
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/ISSUE_TEMPLATE/bug_report.md +28 -28
- package/.github/ISSUE_TEMPLATE/config.yml +5 -5
- package/.github/ISSUE_TEMPLATE/feature_request.md +20 -20
- package/.github/PULL_REQUEST_TEMPLATE.md +24 -24
- package/.github/workflows/publish.yml +8 -5
- package/CHANGELOG.md +263 -235
- package/CODE_OF_CONDUCT.md +36 -36
- package/LICENSE +21 -21
- package/PRD.md +96 -96
- package/PUBLISH.md +142 -142
- package/README.md +217 -217
- package/SECURITY.md +30 -30
- package/commitlint.config.cjs +4 -4
- package/docs/CREATE_RELEASES.md +103 -103
- package/docs/QUICK_RELEASE_GUIDE.md +101 -101
- package/docs/release-notes/RELEASE_NOTES.md +217 -185
- package/index.js +199 -199
- package/netlify.toml +2 -2
- package/package.json +96 -96
- package/scripts/create-releases.js +219 -219
- package/scripts/release.cjs +258 -258
- package/scripts/update-release-notes.cjs +182 -182
- package/web/README.md +79 -79
- package/web/css/style.css +963 -963
- package/web/favicon.svg +10 -10
- package/web/index.html +510 -510
- package/web/js/script.js +256 -256
- package/web/og-image.svg +24 -24
- package/.netlify/netlify.toml +0 -25
- package/.netlify/state.json +0 -3
package/README.md
CHANGED
|
@@ -1,217 +1,217 @@
|
|
|
1
|
-
# Commiter ๐
|
|
2
|
-
|
|
3
|
-
[](https://www.npmjs.com/package/@programinglive/commiter)
|
|
4
|
-
[](https://www.npmjs.com/package/@programinglive/commiter)
|
|
5
|
-
[](https://github.com/programinglive/commiter/actions/workflows/publish.yml)
|
|
6
|
-
[](LICENSE)
|
|
7
|
-
|
|
8
|
-
A standardized commit convention and release management tool for your repository using `standard-version`.
|
|
9
|
-
|
|
10
|
-
## Features
|
|
11
|
-
|
|
12
|
-
- โ
**Enforced Commit Conventions** - Uses Conventional Commits format
|
|
13
|
-
- ๐ฏ **Automated Versioning** - Semantic versioning (major, minor, patch)
|
|
14
|
-
- ๐ **Changelog Generation** - Automatic CHANGELOG.md with icons
|
|
15
|
-
- ๐ **Git Hooks** - Pre-commit and commit-msg validation via Husky
|
|
16
|
-
- ๐จ **Icon Support** - Each commit type has a dedicated icon in releases
|
|
17
|
-
|
|
18
|
-
## Installation
|
|
19
|
-
|
|
20
|
-
Install the package globally or as a dev dependency in your project:
|
|
21
|
-
|
|
22
|
-
```bash
|
|
23
|
-
# Install globally
|
|
24
|
-
npm install -g @programinglive/commiter
|
|
25
|
-
|
|
26
|
-
# Or install as dev dependency
|
|
27
|
-
npm install --save-dev @programinglive/commiter
|
|
28
|
-
|
|
29
|
-
# Or use npx (no installation required)
|
|
30
|
-
npx @programinglive/commiter
|
|
31
|
-
```
|
|
32
|
-
|
|
33
|
-
After installation in your project, the Husky hooks will be automatically set up for commit message validation.
|
|
34
|
-
|
|
35
|
-
### Recommended MCP workflow companion
|
|
36
|
-
|
|
37
|
-
For a guided end-to-end engineering workflow, install the [Development Workflow MCP Server](https://github.com/programinglive/dev-workflow-mcp-server) alongside Commiter:
|
|
38
|
-
|
|
39
|
-
```bash
|
|
40
|
-
npm install --save-dev @programinglive/dev-workflow-mcp-server
|
|
41
|
-
```
|
|
42
|
-
|
|
43
|
-
Follow the configuration steps in that repository's README to connect your IDE assistant and automate the standard development workflow (start task โ implement โ test โ document โ commit โ release).
|
|
44
|
-
|
|
45
|
-
## Commit Message Format
|
|
46
|
-
|
|
47
|
-
All commits must follow the [Conventional Commits](https://www.conventionalcommits.org/) specification:
|
|
48
|
-
|
|
49
|
-
```
|
|
50
|
-
<type>(<scope>): <subject>
|
|
51
|
-
|
|
52
|
-
<body>
|
|
53
|
-
|
|
54
|
-
<footer>
|
|
55
|
-
```
|
|
56
|
-
|
|
57
|
-
### Commit Types with Icons
|
|
58
|
-
|
|
59
|
-
| Type | Icon | Description | Changelog Section |
|
|
60
|
-
|------|------|-------------|-------------------|
|
|
61
|
-
| `feat` | โจ | New feature | โจ Features |
|
|
62
|
-
| `fix` | ๐ | Bug fix | ๐ Bug Fixes |
|
|
63
|
-
| `perf` | โก | Performance improvement | โก Performance |
|
|
64
|
-
| `refactor` | โป๏ธ | Code refactoring | โป๏ธ Refactors |
|
|
65
|
-
| `docs` | ๐ | Documentation changes | ๐ Documentation |
|
|
66
|
-
| `style` | ๐ | Code style changes | ๐ Styles |
|
|
67
|
-
| `test` | โ
| Test additions/changes | โ
Tests |
|
|
68
|
-
| `build` | ๐๏ธ | Build system changes | ๐๏ธ Build System |
|
|
69
|
-
| `ci` | ๐ท | CI/CD changes | ๐ท Continuous Integration |
|
|
70
|
-
| `chore` | ๐งน | Maintenance tasks | ๐งน Chores |
|
|
71
|
-
| `revert` | โช | Revert previous commit | โช Reverts |
|
|
72
|
-
|
|
73
|
-
### Examples
|
|
74
|
-
|
|
75
|
-
```bash
|
|
76
|
-
# Feature
|
|
77
|
-
git commit -m "feat(auth): add JWT authentication"
|
|
78
|
-
|
|
79
|
-
# Bug fix
|
|
80
|
-
git commit -m "fix(api): resolve null pointer exception"
|
|
81
|
-
|
|
82
|
-
# Breaking change
|
|
83
|
-
git commit -m "feat(api)!: redesign user endpoint
|
|
84
|
-
|
|
85
|
-
BREAKING CHANGE: The user endpoint now returns different data structure"
|
|
86
|
-
|
|
87
|
-
# With scope and body
|
|
88
|
-
git commit -m "perf(database): optimize query performance
|
|
89
|
-
|
|
90
|
-
Reduced query time by 50% using indexed columns"
|
|
91
|
-
```
|
|
92
|
-
|
|
93
|
-
## Release Commands
|
|
94
|
-
|
|
95
|
-
### Patch Release (1.0.0 โ 1.0.1)
|
|
96
|
-
|
|
97
|
-
For bug fixes and minor changes:
|
|
98
|
-
|
|
99
|
-
```bash
|
|
100
|
-
npm run release:patch
|
|
101
|
-
```
|
|
102
|
-
|
|
103
|
-
### Minor Release (1.0.0 โ 1.1.0)
|
|
104
|
-
|
|
105
|
-
For new features (backwards compatible):
|
|
106
|
-
|
|
107
|
-
```bash
|
|
108
|
-
npm run release:minor
|
|
109
|
-
```
|
|
110
|
-
|
|
111
|
-
### Major Release (1.0.0 โ 2.0.0)
|
|
112
|
-
|
|
113
|
-
For breaking changes:
|
|
114
|
-
|
|
115
|
-
```bash
|
|
116
|
-
npm run release:major
|
|
117
|
-
```
|
|
118
|
-
|
|
119
|
-
### Automatic Release
|
|
120
|
-
|
|
121
|
-
Let `standard-version` determine the version bump based on commits:
|
|
122
|
-
|
|
123
|
-
```bash
|
|
124
|
-
npm run release
|
|
125
|
-
```
|
|
126
|
-
|
|
127
|
-
## What Happens During Release?
|
|
128
|
-
|
|
129
|
-
1. ๐งช **Runs tests** - Detects your package manager and runs the `test` script automatically (tests only run during release, not on commit)
|
|
130
|
-
2. ๐ **Analyzes commits** - Examines commits since last release
|
|
131
|
-
3. ๐ข **Bumps version** - Updates version in `package.json`
|
|
132
|
-
4. ๐ **Updates changelog** - Generates `CHANGELOG.md` with icons
|
|
133
|
-
5. ๐ท๏ธ **Creates tag** - Creates a git tag for the release
|
|
134
|
-
6. ๐พ **Commits release** - Commits changes with format: `chore(release): v1.2.3 ๐`
|
|
135
|
-
|
|
136
|
-
## Push Your Release
|
|
137
|
-
|
|
138
|
-
After running a release command, push to remote:
|
|
139
|
-
|
|
140
|
-
```bash
|
|
141
|
-
git push --follow-tags origin main
|
|
142
|
-
```
|
|
143
|
-
|
|
144
|
-
## Pre-commit Hooks
|
|
145
|
-
|
|
146
|
-
The following hooks are automatically enforced:
|
|
147
|
-
|
|
148
|
-
- **commit-msg**: Validates commit message format using commitlint
|
|
149
|
-
- **pre-commit**: Empty hook (tests are run only during release, not on commit)
|
|
150
|
-
|
|
151
|
-
## Configuration Files
|
|
152
|
-
|
|
153
|
-
- `package.json` - Contains `standard-version` configuration
|
|
154
|
-
- `commitlint.config.js` - Commitlint rules
|
|
155
|
-
- `.husky/commit-msg` - Commit message validation hook
|
|
156
|
-
- `.husky/pre-commit` - Pre-commit test hook
|
|
157
|
-
|
|
158
|
-
## Troubleshooting
|
|
159
|
-
|
|
160
|
-
### Commit message validation fails
|
|
161
|
-
|
|
162
|
-
Ensure your commit message follows the format:
|
|
163
|
-
```
|
|
164
|
-
type(scope): subject
|
|
165
|
-
```
|
|
166
|
-
|
|
167
|
-
Valid types: `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `build`, `ci`, `chore`, `revert`
|
|
168
|
-
|
|
169
|
-
Release commits generated by `standard-version` such as `chore(release): 1.0.0 ๐` are automatically ignored by `commitlint`.
|
|
170
|
-
|
|
171
|
-
### First Release
|
|
172
|
-
|
|
173
|
-
For new projects without any version tags, use the first release command to start from version 0.0.1:
|
|
174
|
-
|
|
175
|
-
```bash
|
|
176
|
-
npm run release:first
|
|
177
|
-
```
|
|
178
|
-
|
|
179
|
-
Running the first release command:
|
|
180
|
-
- Sets the initial version to **0.0.1**
|
|
181
|
-
- Creates the first git tag
|
|
182
|
-
- Generates the initial CHANGELOG.md
|
|
183
|
-
- Commits the release with proper formatting
|
|
184
|
-
|
|
185
|
-
This ensures your project starts with a clean, semantic version foundation. Replace the default test script with your real test command once available.
|
|
186
|
-
|
|
187
|
-
### Dry run
|
|
188
|
-
|
|
189
|
-
To see what would happen without making changes:
|
|
190
|
-
|
|
191
|
-
```bash
|
|
192
|
-
npm run release -- --dry-run
|
|
193
|
-
```
|
|
194
|
-
|
|
195
|
-
## Website
|
|
196
|
-
|
|
197
|
-
The project includes a professional landing page in the `web/` directory.
|
|
198
|
-
|
|
199
|
-
### Local Development
|
|
200
|
-
|
|
201
|
-
To run the website locally:
|
|
202
|
-
|
|
203
|
-
```bash
|
|
204
|
-
npm run web
|
|
205
|
-
```
|
|
206
|
-
|
|
207
|
-
This will serve the website at `http://localhost:3000`.
|
|
208
|
-
|
|
209
|
-
## Contributing
|
|
210
|
-
|
|
211
|
-
Contributions are welcome! Please read [CONTRIBUTING.md](CONTRIBUTING.md) for details on our code of conduct and the process for submitting pull requests.
|
|
212
|
-
|
|
213
|
-
## License
|
|
214
|
-
|
|
215
|
-
MIT License - see the [LICENSE](LICENSE) file for details.
|
|
216
|
-
|
|
217
|
-
This project is open source and free to use, modify, and distribute at your own risk.
|
|
1
|
+
# Commiter ๐
|
|
2
|
+
|
|
3
|
+
[](https://www.npmjs.com/package/@programinglive/commiter)
|
|
4
|
+
[](https://www.npmjs.com/package/@programinglive/commiter)
|
|
5
|
+
[](https://github.com/programinglive/commiter/actions/workflows/publish.yml)
|
|
6
|
+
[](LICENSE)
|
|
7
|
+
|
|
8
|
+
A standardized commit convention and release management tool for your repository using `standard-version`.
|
|
9
|
+
|
|
10
|
+
## Features
|
|
11
|
+
|
|
12
|
+
- โ
**Enforced Commit Conventions** - Uses Conventional Commits format
|
|
13
|
+
- ๐ฏ **Automated Versioning** - Semantic versioning (major, minor, patch)
|
|
14
|
+
- ๐ **Changelog Generation** - Automatic CHANGELOG.md with icons
|
|
15
|
+
- ๐ **Git Hooks** - Pre-commit and commit-msg validation via Husky
|
|
16
|
+
- ๐จ **Icon Support** - Each commit type has a dedicated icon in releases
|
|
17
|
+
|
|
18
|
+
## Installation
|
|
19
|
+
|
|
20
|
+
Install the package globally or as a dev dependency in your project:
|
|
21
|
+
|
|
22
|
+
```bash
|
|
23
|
+
# Install globally
|
|
24
|
+
npm install -g @programinglive/commiter
|
|
25
|
+
|
|
26
|
+
# Or install as dev dependency
|
|
27
|
+
npm install --save-dev @programinglive/commiter
|
|
28
|
+
|
|
29
|
+
# Or use npx (no installation required)
|
|
30
|
+
npx @programinglive/commiter
|
|
31
|
+
```
|
|
32
|
+
|
|
33
|
+
After installation in your project, the Husky hooks will be automatically set up for commit message validation.
|
|
34
|
+
|
|
35
|
+
### Recommended MCP workflow companion
|
|
36
|
+
|
|
37
|
+
For a guided end-to-end engineering workflow, install the [Development Workflow MCP Server](https://github.com/programinglive/dev-workflow-mcp-server) alongside Commiter:
|
|
38
|
+
|
|
39
|
+
```bash
|
|
40
|
+
npm install --save-dev @programinglive/dev-workflow-mcp-server
|
|
41
|
+
```
|
|
42
|
+
|
|
43
|
+
Follow the configuration steps in that repository's README to connect your IDE assistant and automate the standard development workflow (start task โ implement โ test โ document โ commit โ release).
|
|
44
|
+
|
|
45
|
+
## Commit Message Format
|
|
46
|
+
|
|
47
|
+
All commits must follow the [Conventional Commits](https://www.conventionalcommits.org/) specification:
|
|
48
|
+
|
|
49
|
+
```
|
|
50
|
+
<type>(<scope>): <subject>
|
|
51
|
+
|
|
52
|
+
<body>
|
|
53
|
+
|
|
54
|
+
<footer>
|
|
55
|
+
```
|
|
56
|
+
|
|
57
|
+
### Commit Types with Icons
|
|
58
|
+
|
|
59
|
+
| Type | Icon | Description | Changelog Section |
|
|
60
|
+
|------|------|-------------|-------------------|
|
|
61
|
+
| `feat` | โจ | New feature | โจ Features |
|
|
62
|
+
| `fix` | ๐ | Bug fix | ๐ Bug Fixes |
|
|
63
|
+
| `perf` | โก | Performance improvement | โก Performance |
|
|
64
|
+
| `refactor` | โป๏ธ | Code refactoring | โป๏ธ Refactors |
|
|
65
|
+
| `docs` | ๐ | Documentation changes | ๐ Documentation |
|
|
66
|
+
| `style` | ๐ | Code style changes | ๐ Styles |
|
|
67
|
+
| `test` | โ
| Test additions/changes | โ
Tests |
|
|
68
|
+
| `build` | ๐๏ธ | Build system changes | ๐๏ธ Build System |
|
|
69
|
+
| `ci` | ๐ท | CI/CD changes | ๐ท Continuous Integration |
|
|
70
|
+
| `chore` | ๐งน | Maintenance tasks | ๐งน Chores |
|
|
71
|
+
| `revert` | โช | Revert previous commit | โช Reverts |
|
|
72
|
+
|
|
73
|
+
### Examples
|
|
74
|
+
|
|
75
|
+
```bash
|
|
76
|
+
# Feature
|
|
77
|
+
git commit -m "feat(auth): add JWT authentication"
|
|
78
|
+
|
|
79
|
+
# Bug fix
|
|
80
|
+
git commit -m "fix(api): resolve null pointer exception"
|
|
81
|
+
|
|
82
|
+
# Breaking change
|
|
83
|
+
git commit -m "feat(api)!: redesign user endpoint
|
|
84
|
+
|
|
85
|
+
BREAKING CHANGE: The user endpoint now returns different data structure"
|
|
86
|
+
|
|
87
|
+
# With scope and body
|
|
88
|
+
git commit -m "perf(database): optimize query performance
|
|
89
|
+
|
|
90
|
+
Reduced query time by 50% using indexed columns"
|
|
91
|
+
```
|
|
92
|
+
|
|
93
|
+
## Release Commands
|
|
94
|
+
|
|
95
|
+
### Patch Release (1.0.0 โ 1.0.1)
|
|
96
|
+
|
|
97
|
+
For bug fixes and minor changes:
|
|
98
|
+
|
|
99
|
+
```bash
|
|
100
|
+
npm run release:patch
|
|
101
|
+
```
|
|
102
|
+
|
|
103
|
+
### Minor Release (1.0.0 โ 1.1.0)
|
|
104
|
+
|
|
105
|
+
For new features (backwards compatible):
|
|
106
|
+
|
|
107
|
+
```bash
|
|
108
|
+
npm run release:minor
|
|
109
|
+
```
|
|
110
|
+
|
|
111
|
+
### Major Release (1.0.0 โ 2.0.0)
|
|
112
|
+
|
|
113
|
+
For breaking changes:
|
|
114
|
+
|
|
115
|
+
```bash
|
|
116
|
+
npm run release:major
|
|
117
|
+
```
|
|
118
|
+
|
|
119
|
+
### Automatic Release
|
|
120
|
+
|
|
121
|
+
Let `standard-version` determine the version bump based on commits:
|
|
122
|
+
|
|
123
|
+
```bash
|
|
124
|
+
npm run release
|
|
125
|
+
```
|
|
126
|
+
|
|
127
|
+
## What Happens During Release?
|
|
128
|
+
|
|
129
|
+
1. ๐งช **Runs tests** - Detects your package manager and runs the `test` script automatically (tests only run during release, not on commit)
|
|
130
|
+
2. ๐ **Analyzes commits** - Examines commits since last release
|
|
131
|
+
3. ๐ข **Bumps version** - Updates version in `package.json`
|
|
132
|
+
4. ๐ **Updates changelog** - Generates `CHANGELOG.md` with icons
|
|
133
|
+
5. ๐ท๏ธ **Creates tag** - Creates a git tag for the release
|
|
134
|
+
6. ๐พ **Commits release** - Commits changes with format: `chore(release): v1.2.3 ๐`
|
|
135
|
+
|
|
136
|
+
## Push Your Release
|
|
137
|
+
|
|
138
|
+
After running a release command, push to remote:
|
|
139
|
+
|
|
140
|
+
```bash
|
|
141
|
+
git push --follow-tags origin main
|
|
142
|
+
```
|
|
143
|
+
|
|
144
|
+
## Pre-commit Hooks
|
|
145
|
+
|
|
146
|
+
The following hooks are automatically enforced:
|
|
147
|
+
|
|
148
|
+
- **commit-msg**: Validates commit message format using commitlint
|
|
149
|
+
- **pre-commit**: Empty hook (tests are run only during release, not on commit)
|
|
150
|
+
|
|
151
|
+
## Configuration Files
|
|
152
|
+
|
|
153
|
+
- `package.json` - Contains `standard-version` configuration
|
|
154
|
+
- `commitlint.config.js` - Commitlint rules
|
|
155
|
+
- `.husky/commit-msg` - Commit message validation hook
|
|
156
|
+
- `.husky/pre-commit` - Pre-commit test hook
|
|
157
|
+
|
|
158
|
+
## Troubleshooting
|
|
159
|
+
|
|
160
|
+
### Commit message validation fails
|
|
161
|
+
|
|
162
|
+
Ensure your commit message follows the format:
|
|
163
|
+
```
|
|
164
|
+
type(scope): subject
|
|
165
|
+
```
|
|
166
|
+
|
|
167
|
+
Valid types: `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `build`, `ci`, `chore`, `revert`
|
|
168
|
+
|
|
169
|
+
Release commits generated by `standard-version` such as `chore(release): 1.0.0 ๐` are automatically ignored by `commitlint`.
|
|
170
|
+
|
|
171
|
+
### First Release
|
|
172
|
+
|
|
173
|
+
For new projects without any version tags, use the first release command to start from version 0.0.1:
|
|
174
|
+
|
|
175
|
+
```bash
|
|
176
|
+
npm run release:first
|
|
177
|
+
```
|
|
178
|
+
|
|
179
|
+
Running the first release command:
|
|
180
|
+
- Sets the initial version to **0.0.1**
|
|
181
|
+
- Creates the first git tag
|
|
182
|
+
- Generates the initial CHANGELOG.md
|
|
183
|
+
- Commits the release with proper formatting
|
|
184
|
+
|
|
185
|
+
This ensures your project starts with a clean, semantic version foundation. Replace the default test script with your real test command once available.
|
|
186
|
+
|
|
187
|
+
### Dry run
|
|
188
|
+
|
|
189
|
+
To see what would happen without making changes:
|
|
190
|
+
|
|
191
|
+
```bash
|
|
192
|
+
npm run release -- --dry-run
|
|
193
|
+
```
|
|
194
|
+
|
|
195
|
+
## Website
|
|
196
|
+
|
|
197
|
+
The project includes a professional landing page in the `web/` directory.
|
|
198
|
+
|
|
199
|
+
### Local Development
|
|
200
|
+
|
|
201
|
+
To run the website locally:
|
|
202
|
+
|
|
203
|
+
```bash
|
|
204
|
+
npm run web
|
|
205
|
+
```
|
|
206
|
+
|
|
207
|
+
This will serve the website at `http://localhost:3000`.
|
|
208
|
+
|
|
209
|
+
## Contributing
|
|
210
|
+
|
|
211
|
+
Contributions are welcome! Please read [CONTRIBUTING.md](CONTRIBUTING.md) for details on our code of conduct and the process for submitting pull requests.
|
|
212
|
+
|
|
213
|
+
## License
|
|
214
|
+
|
|
215
|
+
MIT License - see the [LICENSE](LICENSE) file for details.
|
|
216
|
+
|
|
217
|
+
This project is open source and free to use, modify, and distribute at your own risk.
|
package/SECURITY.md
CHANGED
|
@@ -1,30 +1,30 @@
|
|
|
1
|
-
# Security Policy
|
|
2
|
-
|
|
3
|
-
## Reporting a Vulnerability
|
|
4
|
-
|
|
5
|
-
If you discover a security vulnerability in `@programinglive/commiter`, please report it responsibly.
|
|
6
|
-
|
|
7
|
-
Send your report to: [security@programinglive.com](mailto:security@programinglive.com).
|
|
8
|
-
|
|
9
|
-
Please include:
|
|
10
|
-
- A detailed description of the vulnerability
|
|
11
|
-
- Steps to reproduce the issue
|
|
12
|
-
- Any potential impact
|
|
13
|
-
- Optional: Suggested mitigation or patch
|
|
14
|
-
|
|
15
|
-
We aim to respond within **48 hours** and will keep you informed of our progress.
|
|
16
|
-
|
|
17
|
-
## Supported Versions
|
|
18
|
-
|
|
19
|
-
We support the latest released version of the package. Please ensure you are running the most recent version before reporting issues.
|
|
20
|
-
|
|
21
|
-
## Disclosure Policy
|
|
22
|
-
|
|
23
|
-
We follow a coordinated disclosure process:
|
|
24
|
-
1. Acknowledge receipt of your report within 48 hours
|
|
25
|
-
2. Assess the vulnerability and determine severity
|
|
26
|
-
3. Fix the issue and prepare a release
|
|
27
|
-
4. Credit the reporter (if desired)
|
|
28
|
-
5. Publish a security advisory detailing the fix
|
|
29
|
-
|
|
30
|
-
Thank you for helping keep our project secure!
|
|
1
|
+
# Security Policy
|
|
2
|
+
|
|
3
|
+
## Reporting a Vulnerability
|
|
4
|
+
|
|
5
|
+
If you discover a security vulnerability in `@programinglive/commiter`, please report it responsibly.
|
|
6
|
+
|
|
7
|
+
Send your report to: [security@programinglive.com](mailto:security@programinglive.com).
|
|
8
|
+
|
|
9
|
+
Please include:
|
|
10
|
+
- A detailed description of the vulnerability
|
|
11
|
+
- Steps to reproduce the issue
|
|
12
|
+
- Any potential impact
|
|
13
|
+
- Optional: Suggested mitigation or patch
|
|
14
|
+
|
|
15
|
+
We aim to respond within **48 hours** and will keep you informed of our progress.
|
|
16
|
+
|
|
17
|
+
## Supported Versions
|
|
18
|
+
|
|
19
|
+
We support the latest released version of the package. Please ensure you are running the most recent version before reporting issues.
|
|
20
|
+
|
|
21
|
+
## Disclosure Policy
|
|
22
|
+
|
|
23
|
+
We follow a coordinated disclosure process:
|
|
24
|
+
1. Acknowledge receipt of your report within 48 hours
|
|
25
|
+
2. Assess the vulnerability and determine severity
|
|
26
|
+
3. Fix the issue and prepare a release
|
|
27
|
+
4. Credit the reporter (if desired)
|
|
28
|
+
5. Publish a security advisory detailing the fix
|
|
29
|
+
|
|
30
|
+
Thank you for helping keep our project secure!
|
package/commitlint.config.cjs
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
module.exports = {
|
|
2
|
-
extends: ['@commitlint/config-conventional'],
|
|
3
|
-
ignores: [(message) => message.startsWith('chore(release):')]
|
|
4
|
-
};
|
|
1
|
+
module.exports = {
|
|
2
|
+
extends: ['@commitlint/config-conventional'],
|
|
3
|
+
ignores: [(message) => message.startsWith('chore(release):')]
|
|
4
|
+
};
|