
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
Based on this gist by @gustavopch
You can install this on your package using npm i -D commitme or run it once using npx commitme
Create a .commitrc on the root of your project to customize the choices.
Add this to your VSCode config file in order to get autocomplete for the config file:
"files.associations": {
".commitrc": "jsonc"
},
"json.schemas": [
{
"fileMatch": [".commitrc"],
"url": "https://raw.githubusercontent.com/roziscoding/commit-me/main/config-schema.json"
}
]
choices:
list prompt type
The name must be the commit type description, and the value must be an emojireplaceDefaultChoices:
-a: Runs git add --all before commiting
--print: Prints the commit message, instead of caling git (will ignore the -a flag)
FAQs
Simple git commit CLi
The npm package commitme receives a total of 0 weekly downloads. As such, commitme popularity was classified as not popular.
We found that commitme demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.