semver-truncate

This is exactly what a utility library should be: focused, predictable, and low-risk. It takes a semver string and truncates it to your desired precision level (major, minor, patch). The implementation is straightforward - it depends on the well-vetted `semver` package for parsing and validation, then reconstructs the version string with zeros for the truncated parts.

From a security perspective, this package scores well. It has exactly one dependency (`semver`), which dramatically reduces supply chain risk compared to utilities that pull in dozens of transitive dependencies. Input validation is handled by delegating to `semver.parse()`, which throws clear TypeError exceptions for invalid inputs - no silent failures or ambiguous states. The error messages are informative without leaking sensitive context.

The API is dead simple: `semverTruncate(version, level)` where level is 'major', 'minor', or 'patch'. No configuration footguns, no global state, no crypto concerns since it's pure string manipulation. The main gotcha is remembering to handle the thrown errors when users provide malformed version strings, but that's expected behavior for invalid input.

semver-truncate is a tiny utility that truncates semantic version strings to a specified level. The API is dead simple: `semverTruncate('1.2.3', 'minor')` returns `'1.2.0'`. It accepts 'major', 'minor', or 'patch' as the second argument. The function is pure, predictable, and has zero dependencies beyond the semver parsing it needs to do.

The TypeScript support is solid with proper type definitions included. The function signature is clear and IDE autocomplete works perfectly, suggesting the three valid truncation levels. Error handling is reasonable—it throws on invalid semver strings, though the error messages come from the underlying semver library and aren't always the most helpful.

The main limitation is its narrow scope. If you need anything beyond basic truncation (like incrementing versions, comparing, or ranges), you'll need additional packages. The documentation is minimal but honestly, the API is so straightforward you barely need it. This is one of those packages that just works without requiring you to think much about it.

This is a straightforward utility that takes a semver string and truncates it to a specified level (major, minor, or patch). In production, it's been rock-solid for version normalization tasks like Docker image tagging strategies or aligning dependency ranges. The API is dead simple: `semverTruncate('1.2.3', 'minor')` returns `'1.2.0'`. No surprises, no configuration needed.

The package has zero runtime dependencies, which is perfect for production environments where supply chain concerns matter. It throws clear errors on invalid semver input, making debugging straightforward. Performance is excellent - it's essentially string manipulation with validation, sub-millisecond execution, and negligible memory footprint.

The only real limitation is scope: it's intentionally minimal. No support for prerelease tags or build metadata truncation patterns, though it preserves them correctly. For most CI/CD pipelines and version management tasks, this is exactly what you need without the bloat of pulling in the full semver package for a simple truncation operation.