
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@e0ipso/ddev-worktree
Advanced tools
Supercharge your Drupal development workflow with automated Git worktrees and DDEV environments
Transform your feature development process from manual setup hell to one-command automation. Create isolated development environments in seconds, not minutes.
DDEV Worktree automates Git worktree creation with DDEV environments for Drupal development. Replace manual 5-minute setups with 30-second automation:
# Create a fully configured environment in one command
./ddev-worktree create 123 user-auth --clone-db
npm install -g @e0ipso/ddev-worktree
# Manual installation for development
git clone https://github.com/e0ipso/ddev-worktree.git
cd ddev-worktree && chmod +x ddev-worktree
ddev-worktree create 123 my-feature --clone-db
cd ../drupal-worktrees/wt-123-my-feature
# Environment ready with DDEV running and dependencies installed
See Command Reference and Hook System for details.
Run the comprehensive E2E test suite that validates real DDEV environments:
./setup-bats.sh # Install test dependencies (one-time setup)
./run-bats-tests.sh # Run all E2E tests
./run-bats-tests.sh --verbose # Run with detailed output
Contributions may be welcome. See the Contributing Guide for details.
This software is distributed under a Proprietary License with Revocation Rights. Free to use with conditions - see LICENSE file for details.
FAQs
Automated Git worktree setup with DDEV for Drupal development
The npm package @e0ipso/ddev-worktree receives a total of 3 weekly downloads. As such, @e0ipso/ddev-worktree popularity was classified as not popular.
We found that @e0ipso/ddev-worktree demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.