
Company News
Socket Named Top Sales Organization by RepVue
Socket won two 2026 Reppy Awards from RepVue, ranking in the top 5% of all sales orgs. AE Alexandra Lister shares what it's like to grow a sales career here.
git-bundle-sha
Advanced tools
Retrieve the git SHA of the commit that most recently touched a list of files.
Retrieve the Git SHA of the latest commit that touched any number of files. Useful in particular with bundling, when you want to identify a collection of files by something like a hash, but tied to something more real (like a Git history.)
Install using npm:
npm install git-bundle-sha
And then require:
var gitsha = require('git-bundle-sha');
gitsha(['lib/server.js', 'lib/common.js', 'helpers/handlebars.js'], function (err, sha) {
if (err) throw err;
console.log('Git SHA: ' + sha);
});
gitsha(function(err, sha) {
if (err) throw err;
console.log('HEAD is at ' + sha);
});
forceDon't read any values from cache (some things, like the submodule list, are cached for performance.) Default = false.
lengthTrim the resulting SHA to a specified length. Default = null (no trimming.)
This works by sub-shelling out to a Git process, so your node process must be able to access git. This also means that it is tied to your project directory at the moment.
Yes. If you are using submodules, any file nested under that submodule directory will have a last-modified SHA that corresponds to the commit that last updated the submodule in the parent project.
FAQs
Retrieve the git SHA of the commit that most recently touched a list of files.
The npm package git-bundle-sha receives a total of 155 weekly downloads. As such, git-bundle-sha popularity was classified as not popular.
We found that git-bundle-sha demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket won two 2026 Reppy Awards from RepVue, ranking in the top 5% of all sales orgs. AE Alexandra Lister shares what it's like to grow a sales career here.

Security News
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.

Company News
/Security News
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.