Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@maccuaa/git-clean
Advanced tools
Keeping the number of branches in your git repository sane.
Use this scipt to identify stale git branches that should be deleted. It does this by iterating over every branch in the repository and getting the last commit author, and the date of the last commit.
# globally
npm i -g @maccuaa/git-clean
# in your project
npm i -D @maccuaa/git-clean
Once installed, you must configure some parameters for git-clean.
It is recommended to create a .gitcleanrc
file in the root of your project.
git-clean uses the rc library for finding and loading configs. It is possible to define these settings in other places as well, for a list of all supported option please see the rc project.
This example also shows the default values git-clean uses.
# .gitcleanrc
# Required
REMOTE_URL =
# Optional
JIRA_PROJECTS =
MAIN_BRANCH = master
PROTECTED_BRANCHES = HEAD, origin/master
Option | Description |
---|---|
REMOTE_URL | the URL to the remote Git server |
JIRA_PROJECTS | comma separated list of Jira project codes that you want to display links for |
MAIN_BRANCH | the name of your main branch. Generally this is the master branch |
PROTECTED_BRANCHES | comma separated list of branches that are protected and should not be deleted. |
Branches matching any of PROTECTED_BRANCHES values these values will not be displayed by git-clean.
For large projects with multiple developers and a large number of branches it is recommended to commit a .gitcleanrc
file in the root of your project.
install git-clean as a devDependency
FAQs
CLI tool for finding stale Git branches
The npm package @maccuaa/git-clean receives a total of 0 weekly downloads. As such, @maccuaa/git-clean popularity was classified as not popular.
We found that @maccuaa/git-clean demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.