
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
git-cleanup
Advanced tools
A node-based command line utility to cleanup git repositories in a safe fashion. Time- and Merge-based.
A node-based command line utility to cleanup git repositories in a safe fashion. Time- and Merge-based.
This utility will help you to delete your git branches (local and remote ones) that are already merged into a target branch and that have not been touched for at least two weeks.
This is ALPHA software. This utility issues git branch -d and even git branch -r -d commands and can delete remote as well as local branches. It has not been tested to the fullest. So make sure you would be able to restore your work! We are not responsible for any loss of data in your repos.
npm install -g git-cleanupgit-cleanupgit-cleanup --help will give you
Usage: git-cleanup [options]
Options:
-h, --help output usage information
-V, --version output the version number
-p, --path [path] path to where to execute git (default: __dirname)
-r, --remote [name] use remote named (default: use local branches)
-o, --origin use origin (same as --remote="origin")
-b, --both use both origin and local at the same time (default: use local branches)
-t, --target [name] the name of the target branch that is checked (default: master)
-e, --emulate do all checks but don't really delete the branches (will only output messages)
-b, --prefix [regex] only delete branches matching this regex
FAQs
A node-based command line utility to cleanup git repositories in a safe fashion. Time- and Merge-based.
The npm package git-cleanup receives a total of 4 weekly downloads. As such, git-cleanup popularity was classified as not popular.
We found that git-cleanup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain