
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
all-the-package-repos
Advanced tools
All the repository URLs in the npm registry as an object whose keys are package names and values are URLs
Maintained by jsDelivr. Please consider becoming a sponsor to support us.
All the repository URLs in the npm registry as an object whose keys are package names and values are URLs.
This package weighs in at about 200 MB.
| Packages | Count | Percentage |
|---|---|---|
| With repository | 2208205 | 60.16% |
| Null repository | 1462459 | 39.84% |
| Total | 3670664 | 100.00% |
| Providers | Count | Percentage |
|---|---|---|
| GitHub | 2170718 | 59.14% |
| GitLab | 6591 | 0.18% |
| Bitbucket | 1332 | 0.04% |
| Others | 29564 | 0.81% |
| Total | 2208205 | 60.16% |
npm install all-the-package-repos --save
repos = require('all-the-package-repos')
repos.express
// https://github.com/expressjs/express
See example.js for more usage details.
GitHub URLs are normalized to their https form using
github-url-to-object:
git@github.com:foo/bar.git becomes https://github.com/foo/barfoo/bar becomes https://github.com/foo/barFor the curious, there's a submodule that collects all the hostnames of all the repository URLS:
require('./hostnames').slice(0,10)
[
{ value: 'github.com', count: 452768 },
{ value: 'bitbucket.org', count: 553 },
{ value: 'git.oschina.net', count: 219 },
{ value: 'gitlab.com', count: 116 },
{ value: 'git.coding.net', count: 114 },
{ value: 'archive.voodoowarez.com', count: 81 },
{ value: 'gitee.com', count: 60 },
{ value: 'gitlab.baidu.com', count: 49 },
{ value: 'git-wip-us.apache.org', count: 38 },
{ value: 'gitlab.alibaba-inc.com', count: 36 }
]
It also has a CLI:
all-the-package-repo-hostnames | head -n 10
github.com 452768
bitbucket.org 553
git.oschina.net 219
gitlab.com 116
git.coding.net 114
archive.voodoowarez.com 81
gitee.com 60
gitlab.baidu.com 49
git-wip-us.apache.org 38
gitlab.alibaba-inc.com 36
npm install
npm test
None
MIT
Generated by package-json-to-readme
FAQs
All the repository URLs in the npm registry as an object whose keys are package names and values are URLs
The npm package all-the-package-repos receives a total of 1,617 weekly downloads. As such, all-the-package-repos popularity was classified as popular.
We found that all-the-package-repos demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.