A Guide to Secure Elixir Package Updates

• credo

  8 4,854 9.3 Elixir

  A static code analysis tool for the Elixir language with a focus on code consistency and teaching.

A static code analysis tool with a focus on code consistency and teaching. Config: {:credo, "~> 1.6"} Locked version: 1.6.3 Releases: 1.6.3, 1.6.2, 1.6.1, 1.6.0, 1.6.0-rc.1, 1.6.0-rc.0, 1.5.6, 1.5.5, ... Licenses: MIT Links: Changelog: https://github.com/rrrene/credo/blob/master/CHANGELOG.md <--- Here GitHub: https://github.com/rrrene/credo

• changelog

  1 9 3.4 Elixir

I wrote this open-source task. It uses some heuristics to locate the changelog by retrieving the Hex package metadata from the API, falling back to common locations in the repo.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• semver

  726 7,037 0.6

  Semantic Versioning Specification

  

Furthermore, a package might not even follow Semver (semver indicates whether the update is safe in compatibility terms).

• hexpm

  16 1,034 7.5 Elixir

  API server and website for Hex

  

Dependency Current Latest Status bunt 0.2.0 0.2.0 Up-to-date cowlib 2.11.0 2.11.0 Up-to-date credo 1.6.1 1.6.3 Update possible db_connection 2.4.1 2.4.1 Up-to-date decimal 2.0.0 2.0.0 Up-to-date earmark_parser 1.4.19 1.4.20 Update possible postgrex 0.15.13 0.16.2 Update not possible To view the diffs in each available update, visit: https://hex.pm/l/AsY7q

Suggest a related project