
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
git-co-commit
Advanced tools
When a pair or multiple developers work on git projects, there is a convention that allows us to document our co-authors in the commit message. However, adding the co-authorship information on every single commit is painful.
Do a git commit in the same way it is usually done, with the pair members username, to make them get credit for the commit (if more than one member works on the same code, separate the username by comma). The author’s name(who writes the code - Driver) on the commit will be added automatically.
Each co-author will be added to the commit message, so that they are also credited in the github contributions view!


$ npm i -g git-co-commit
It will install the git-co-commit package and add all the dependencies to the root level of your computer. To use the installed git co commit package do the following
$ mkdir demo
$ cd demo
$ git init
$ touch index.html
$ git add index.html
$ commit

To know more visit the documentation site of git co commit
Git co commit is open source npm package licensed as MIT.
FAQs
Git pairing with multiple co-authors in a simple way.
We found that git-co-commit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.