You’ve almost certainly encountered Conventional Commits before. It may have reared its ugly head in the changelog of an open source project you’ve used. It may have been the enforced commit format for an open source project you contributed to. A lot of people swear by it. I swear at it.
Even though it is used by a large number of popular open source projects, Conventional Commits is an actively bad standard which encourages focus on the wrong things and fails to deliver on its promises.
Conventional Commits promises to add semantic meaning to commit messages to aid developers and end-users in understanding the changes made in a commit. However, Conventional Commits fails to do this in spectacular fashion. To demonstrate this, let’s look at the anatomy of a conventional commit. According to the Conventional Commit website commit messages should be formatted as follows:
<type>[optional scope]: <description>
[optional body]
[optional footer(s)]
The commit’s subject line has a <type> (something like fix, feat, chore,
docs, or refactor1) describing the type of change. Following that, there
is an optional scope, and then a description.
This format has a major failing: type is prioritised over scope. This is exactly backwards.
The scope of a change (the subject of the change) is the most important part of a commit. To demonstrate this, let’s consider why each one of the following stakeholders care about the scope of the change more than the type of the change:
Contributors: when you are a contributor to a project, you often need to read the commit log to identify changes in the codebase relevant to a certain area of the code. There are many reasons for this including:
As you read the commit log, you’re looking at what areas were touched. You really do not care about the type of change happening, you care about the scope of the change.
Debuggers: when investigating a bug, you often want to look through the commit log to see what changes might have touched areas related to the component where the bug manifested. Once again, the scope is the most important piece of information. The type of change is entirely useless because bugs can be introduced in any change regardless of type. (I’m sure we’ve all experienced writing a bugfix that caused another bug.)
Incident responders: when production is down, scanning the commit log for
changes that were made around the time of the outage is an effective way to
identify what areas may be causing the problem. Scope is once again the most
important piece of information you can have at this point. For example, if you
see a commit related to the auth scope at the tip of the spike of inbound
API errors, it’s a likely culprit for the problem. And once again, type is
irrelevant because bugs could have been added by any change.
So what does Conventional Commits do? It deprioritises scope so much that it’s optional! Why the hell is scope optional? Having a commit without a scope is like having a sentence without a subject! Then, to add insult to injury, Conventional Commits elevates type to the front of the commit message. Conventional Commits gets the priority of scope and type entirely wrong.
You might be thinking “so it may be backwards, but commit type is at least still important, right?” and to that I say “no”. A commit’s description should almost always tell you the type of the change! Consider this commit message as an example:
fix(compiler): prevent namespaced SVG <style> elements from being stripped
Even if you only had the description, it’s obvious that it was a bugfix! Space on the subject line of a commit is already at a premium, wasting characters on the type is not helpful! But it’s often even worse than useless; it’s often restrictive. Take this commit message as an example:
refactor(core): Update webmcp support to use document.modelContext
This commit updated the webmcp functionality in the core component to
support both document.modelContext and navigator.modelContext, so was that a
bugfix, refactor, or new feature? I would argue it’s all of them! But again, the
only thing that really matters is that it was a change to the core/webmcp
component.
Conventional Commits fundamentally focuses on the wrong thing (the commit type) and devalues the scope (which is what people actually care about).
So we have determined that the format of Conventional Commits sucks, but it must provide some benefit. Let’s read the Why Use Conventional Commits section to see if any of the reasons make any sense.
Automatically generating CHANGELOGs.
This is the biggest promise of Conventional Commits: you can run a tool like git-cliff or conventional-changelog to generate a changelog from the commits since your last release. Is this even a good idea? No! The audience of a changelog is entirely different than the audience for a commit log!
A changelog is user-facing, and the user cares about understanding the functional differences between versions. They care about what changed from a business/functional perspective.
A commit log is developer-facing, and the developers care about reading a story of how the codebase has changed over time. They care about what changed from a scope perspective.
As you can see, these are two entirely different grains, and any efforts to combine them result in subpar results. The reasons for this are multiple:
Automatically determining a semantic version bump (based on the types of commits landed).
This sounds nice, but the realities of software engineering often interfere significantly with the viability of accurately accomplishing this task. Consider the following situations:
In such situations, you could rewrite history with a rebase, but that often breaks or is prevented by workflows. It also presents a revisionist history to the contributors trying to contribute to the project, reducing the reliability of the story the commit log is telling.
Communicating the nature of changes to teammates, the public, and other stakeholders.
As we have established up to this point, teammates and the public have very different needs from a changelog and commit log. Conventional Commits manages to solve neither.
Triggering build and publish processes.
This is just a bad idea. Say you only run automated security checks on commits
that touch code and then someone creates a Trojan-horse commit titled
docs: fix typos which actually introduces vulnerabilities into the
authentication subsystem? Obviously, that sort of malicious activity would
hopefully be caught in code review, but the automated tooling is bypassed,
putting the onus on a human to identify the problem.
Compute is cheap, just use git diff to identify changed files (scope, once
again) and run build/publish processes based on that.
Making it easier for people to contribute to your projects, by allowing them to explore a more structured commit history.
More structured, sure. Making it easier to contribute? Not at all (as we have already demonstrated at length).
Not a single one of the “selling points” for Conventional Commits actually holds water.
Conventional Commits is also extremely difficult to apply to a project. You are
supposed to define your own set of “types”, but pretty much everyone just takes
the defaults from
commitlint which often
don’t fit well with the particulars of individual projects. This problem is
especially acute in corporate environments where change management and audit
requirements often mandate a ticket number in every commit message. The
<scope> field is the obvious place to put it, but this ends up replacing the
only useful metadata in a Conventional Commit with a completely useless ticket
number.
So what should you do instead? Follow the lead of truly successful software projects like Linux, FreeBSD, Git, Go, and NixOS! What do these projects have in common? They all use scope-prefixed commit messages (where “scope” is defined to be relevant to the actual project). Usually, the scope to use on a given project is self-evident. For the Linux kernel, the subsystem is the natural scope. For Go projects, the package path is the natural scope. For a project using a microservice architecture, the microservice name is the natural scope.
Here are some examples of projects and their commit format guidelines.
| Project | Format | Example |
|---|---|---|
| Linux | subsystem: description | i2c: virtio: mark device ready before registering the adapter |
| FreeBSD | prefix: Description | linuxulator: Return EINVAL for invalid inotify flags |
| Git | area: description | gitlab-ci: update macOS image |
| Go | package: description | net/http/cookiejar: add godoc links |
| nixpkgs | pkg-name: description | xwayland: 24.1.11 -> 24.1.12 |
| Node.js | subsystem: description | stream: fast-path stateless transform flush results |
Unfortunately, despite being used by some of the most successful open source projects ever created, this commit style seems to have lost the branding war. I intend to change that. Introducing scopedcommits.com. The website is dedicated to advocating for a return to commit message sanity, and separating the concern of changelog generation from commit log management.
Conventional Commits’ purported advantages are actually illusory and the industry has seen no tangible benefit from using it as a standard. However, Conventional Commits unfortunately seems to have become fairly popular in open source projects, and due to this it seems like AIs have a habit of defaulting to using it for commit messages. This has caused propagation of anti-pattern-ridden commit messages across projects.
My goal in this article is to fight against Conventional Commits’ dominance, and demonstrate that there better ways to structure commit messages. But if this article has not convinced you to stop using Conventional Commits, I look forward to the flame war in the comment section.