
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
aggregithub
Advanced tools
Aggregate your GitHub statistics for fun and profit!
Install with npm:
npm install -g aggregithub
aggregithub
is a command-line tool that generates JSON on standard output:
aggregithub [options] <repos> <aggregate type> [aggregate options]
Options:
--auth your GitHub API access token (default: process.env.GITHUB_AUTH_TOKEN)
or credentials in the form "username:password"
--include, -i only include repo names with this glob-like pattern
--exclude, -e exclude repos matching this glob-like pattern
--parallel, -p do this many API requests in parallel [default: 10]
Note: you will very likely run into GitHub API rate limits
if you don't provide the --auth
option or set the GITHUB_AUTH_TOKEN
environment variable. You can get a personal access token on your GitHub settings page, then export it like so:
export GITHUB_AUTH_TOKEN="your-super-secret-token"
You should also considering putting this in a .env
file and using autoenv to have it sourced whenever you enter the directory that contains it. However you decide to do it, remember to back up your token somewhere safe, because you won't be able to get it from GitHub again.
Get commit totals for a user's repos:
aggregithub users/shawnbot commits total > shawnbot-commits.json
Get daily and weekly commit totals for an organization:
aggregithub orgs/18F commits > 18F-commits.json
commits [rollup types]
Uses the commit activity API to get total, daily and weekly commit counts within the last year. Rollup types are any of the following:
total
: the total number of commitsweekly
: weekly rollups as an object with keys in the form YYYY-MM-DD
daily
: daily rollups as an object with keys in the form YYYY-MM-DD
For instance:
$ aggregithub users/username commits total
{
"total": 520
}
issues [event types]
Looks at all of the issue events for one or more repositories and rolls up the number of events by type. If no event types are provided, the default is to list opened
and closed
events. Examples:
# just list opened and closed
$ aggregithub users/username issues
{
"opened": 200,
"closed": 100
}
# list opened, closed and PRs merged
$ aggregithub users/username issues opened closed merged
{
"opened": 200,
"closed": 100,
"merged": 50
}
FAQs
aggregate github statistics
The npm package aggregithub receives a total of 1 weekly downloads. As such, aggregithub popularity was classified as not popular.
We found that aggregithub demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.