rootnovate

v0.0.5

Automated dependency updates. Flexible so you don't need to be. Adapt for rootcloud publish For more information about how to use this package see README

Latest version published 2 years ago

License: AGPL-3.0

NPM

GitHub

Package Health Score

60 / 100

security
Security review needed
popularity
Small
maintenance
Inactive
community
Active

Explore Similar Packages

Security

Security review needed

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions

Version				Vulnerabilities	License Risk
0.0.5	\|	12/2022	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

AGPL-3.0

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.

Security Policy

Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Small

Weekly Downloads (0)

GitHub Stars: 17.23K
Forks: 2.25K
Contributors: 440

Direct Usage Popularity

The npm package rootnovate receives a total of 0 downloads a week. As such, we scored rootnovate popularity level to be Small.

Based on project statistics from the GitHub repository for the npm package rootnovate, we found that it has been starred 17,234 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active

Readme.md: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 440
Funding: No

A good and healthy external contribution signal for rootnovate project, which invites more than one hundred open source maintainers to collaborate on the repository.

Embed Package Health Score Badge

Maintenance

Inactive

Commit Frequency

Open Issues: 662
Open PR: 58
Last Release: 2 years ago
Last Commit: 2 months ago

Further analysis of the maintenance status of rootnovate based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for rootnovate is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: ^14.15.0 || >=16.13.0

Age: 2 years
Dependencies: 101 Direct
Versions: 6
Install Size: 8.61 MB
Dist-tags: 1
# of Files: 2.76K
Maintainers: 1
TS Typings: No

rootnovate has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

Renovate banner

Rootnovate

Adapt for Rootcloud OAM publish. To have a quick test:

rootnovate yaoliang.chen/rootnovate-test --platform gitlab --endpoint https://gitlab.irootech.com/api/v4/ --token=xxxxxxxxxxxxxxxx

Renovate

Automated dependency updates. Multi-platform and multi-language.

Docker Pulls

Why Use Renovate?

Get automated Pull Requests to update your dependencies
Reduce noise by running Renovate on a schedule, for example:
- on weekends
- outside of working hours
- each week
- each month
Relevant package files are discovered automatically
Supports monorepo architectures like Lerna or Yarn workspaces with no extra configuration
Bot behavior is customizable via configuration files (config as code)
Use ESLint-like shared config presets for ease of use and simplifying configuration (JSON format only)
Lock files are supported and updated in the same commit, including immediately resolving conflicts whenever PRs are merged
Get replacement PRs to migrate from a deprecated dependency to the community suggested replacement (npm packages only)
Open source (installable via npm/Yarn or Docker Hub) so can be self-hosted or used via GitHub App

Supported Platforms

Renovate works on the following platforms:

GitHub (.com and Enterprise Server)
GitLab (.com and CE/EE)
Bitbucket Cloud
Bitbucket Server
Azure DevOps
Gitea

Who Uses Renovate?

Renovate is widely used in the developer community:

Renovate Matrix

Renovate OSS Insights

Renovate is built on a big community and actively invites and supports contributions. Information about our contributors and community can be found on OSS Insight.

Star History

The Renovate Approach

We believe everyone benefits from automation, whether it's a little or a lot. This means that Renovate:

Adapts to your workflow
Allows you to configure its behavior
Will autodetect settings where possible

Using Renovate

Get started with Renovate by checking out our tutorial.

GitHub

It's easiest to use the hosted Renovate app. Install the Renovate app now.

More details on the GitHub App installation.

Azure DevOps

There are two ways to run Renovate on Azure DevOps:

Renovate Me extension
Custom pipeline

Renovate Me extension

Go to the Visual Studio Marketplace and install the Renovate Me extension in your organization. From there you can create a pipeline with the RenovateMe task.

Note: This extension is created and maintained personally by a Renovate developer/user so support requests relating to the extension itself cannot be answered directly in the main Renovate repository.

Custom pipeline

You can create a custom pipeline with a yml definition that triggers npx renovate. More details on how to configure the pipeline.

Bitbucket Cloud/Server, Gitea, GitLab

For Bitbucket Cloud, Bitbucket Server, Gitea and GitLab, use our self-hosting option.

Configuration

Go to our documentation website to learn how to configure Renovate. We have a full list of configuration options.

To get help with your configuration, go to the discussions tab in the Renovate repository and open a new "config help" discussion post.

Self-Hosting

To run your own instance of Renovate you have several options:

Install the renovate CLI tool from npmjs, run it on a schedule (e.g. using cron)
Run the renovate/renovate Docker Hub image (same content/versions as the CLI tool), run it on a schedule
Run the renovate/renovate:slim Docker Hub image if you only use package managers that don't need third-party binaries (e.g. JavaScript, Docker, NuGet, pip)

More details on the self-hosting development.

Contributing

If you want to contribute to Renovate or get a local copy running, please read the instructions in .github/contributing.md. To get started look at the list of good first issues.

Security / Disclosure

If you find any bug with Renovate that may be a security problem, then e-mail us at: renovate-disclosure@mend.io. This way we can evaluate the bug and hopefully fix it before it gets abused. Please give us enough time to investigate the bug before you report it anywhere else.

Please do not create GitHub issues for security-related doubts or problems.

rootnovate dependencies

@aws-sdk/client-codecommit @aws-sdk/client-ec2 @aws-sdk/client-ecr @aws-sdk/client-iam @aws-sdk/client-rds @aws-sdk/client-s3 @breejs/later @cheap-glitch/mi-cron @iarna/toml @opentelemetry/api @opentelemetry/context-async-hooks @opentelemetry/exporter-trace-otlp-http @opentelemetry/instrumentation @opentelemetry/instrumentation-bunyan @opentelemetry/instrumentation-http @opentelemetry/resources @opentelemetry/sdk-trace-base @opentelemetry/sdk-trace-node @opentelemetry/semantic-conventions @renovatebot/osv-offline @renovatebot/pep440 @renovatebot/ruby-semver @sindresorhus/is @types/tmp @yarnpkg/core @yarnpkg/parsers agentkeepalive aggregate-error auth-header aws4 azure-devops-node-api bunyan cacache cacheable-lookup chalk changelog-filename-regex clean-git-ref commander conventional-commits-detector crypto-random-string deepmerge delay dequal detect-indent editorconfig email-addresses emoji-regex emojibase emojibase-regex extract-zip find-packages find-up fs-extra git-url-parse github-url-from-git global-agent good-enough-parser got graph-data-structure handlebars hasha ignore ini js-yaml json-dup-key-validator json-stringify-pretty-compact json5 luxon markdown-it markdown-table marshal minimatch moo nanoid node-html-parser openpgp p-all p-map p-queue p-throttle parse-link-header prettier quick-lru redis remark remark-github safe-stable-stringify semver semver-stable semver-utils shlex simple-git slugify traverse tslib upath url-join validate-npm-package-name xmldoc zod re2

rootnovate development dependencies

@jest/globals @jest/reporters @jest/test-result @ls-lint/ls-lint @openpgp/web-stream-tools @renovate/eslint-plugin @semantic-release/exec @types/auth-header @types/aws4 @types/bunyan @types/cacache @types/callsite @types/changelog-filename-regex @types/clean-git-ref @types/conventional-commits-detector @types/diff @types/eslint @types/fs-extra @types/git-url-parse @types/github-url-from-git @types/global-agent @types/ini @types/js-yaml @types/json-dup-key-validator @types/linkify-markdown @types/lodash @types/luxon @types/markdown-it @types/markdown-table @types/marshal @types/moo @types/nock @types/node @types/parse-link-header @types/semver @types/semver-stable @types/semver-utils @types/shelljs @types/traverse @types/url-join @types/validate-npm-package-name @types/xmldoc @typescript-eslint/eslint-plugin @typescript-eslint/parser aws-sdk-client-mock callsite conventional-changelog-conventionalcommits cross-env diff emojibase-data eslint eslint-config-prettier eslint-formatter-gha eslint-import-resolver-typescript eslint-plugin-import eslint-plugin-jest eslint-plugin-jest-formatting eslint-plugin-promise eslint-plugin-typescript-enum expect-more-jest glob graphql husky jest jest-extended jest-junit jest-mock-extended markdownlint-cli2 memfs mock-fs mockdate nock npm-run-all pretty-quick rimraf semantic-release shelljs strip-ansi tmp-promise ts-jest ts-node type-fest typescript unified

FAQs

What is rootnovate?

Automated dependency updates. Flexible so you don't need to be. Adapt for rootcloud publish. Visit Snyk Advisor to see a full health score report for rootnovate, including popularity, security, maintenance & community analysis.

Is rootnovate popular?

We’re still processing downloads data for the npm package rootnovate. Visit the popularity section on Snyk Advisor to see the full popularity analysis.

Is rootnovate well maintained?

We found indications that rootnovate is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is rootnovate safe to use?

While scanning the latest version of rootnovate, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 25 October-2024, at 03:09 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

Package Health Score

Explore Similar Packages

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (0)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Readme

Rootnovate

Renovate

Why Use Renovate?

Supported Platforms

Who Uses Renovate?

Renovate OSS Insights

Star History

The Renovate Approach

Using Renovate

GitHub

Azure DevOps

Renovate Me extension

Custom pipeline

Bitbucket Cloud/Server, Gitea, GitLab

Configuration

Self-Hosting

Contributing

Security / Disclosure

rootnovate dependencies

rootnovate development dependencies

FAQs

What is rootnovate?

Is rootnovate popular?

Is rootnovate well maintained?

Is rootnovate safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues