
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A CLI tool for managing GitHub repositories, issues, and workflows from your terminal, combining custom workflows with full GitHub API coverage.
Command-line toolkit for GitHub: authenticate once, set a repo, and work with issues in bulk or interactively. Includes a generator that syncs the CLI surface with the GitHub OpenAPI spec.
pnpm add -g ghit
# or npm i -g ghit
ghit login (opens browser flow, stores token locally)ghit set-repo owner/nameUse Current Repo for Commands in ghit config to auto-detect repo from your current git workspaceghit infoghit issues to list, view, close/reopen, edit, or deleteghit issues:seed, ghit issues:update, ghit issues:deleteUse Current Repo for Commands is enabled, Ghit resolves the active repository from remote.origin.url in your current workspace.ghit login.default_repo.The CLI can generate commands directly from the GitHub OpenAPI spec. This keeps available commands and params in sync with GitHub without hand-coding.
.ghit/apis.generated.js):
ghit generate:apis
ghit issues:create --title "Bug" --owner org --repo repoghit issues:list-for-repo --owner org --repo repoghit issues:get --owner org --repo repo --issue_number 123Notes
.ghit/apis.generated.js on subsequent runs.Contributions are welcome! Please follow these steps:
git checkout -b feature/amazing-feature)git commit -m 'Add amazing feature')git push origin feature/amazing-feature)This project is licensed under the ISC License - see the LICENSE file for details.
© Copyright 2026 - ToneFlix Technologies Limited
FAQs
A CLI tool for managing GitHub repositories, issues, and workflows from your terminal, combining custom workflows with full GitHub API coverage.
The npm package ghit receives a total of 18 weekly downloads. As such, ghit popularity was classified as not popular.
We found that ghit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.