
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Git activity tracker for standup meetings and project monitoring.
npm install --global git-did
Or install from GitHub sources:
npm install --global https://github.com/mabhub/git-did
git-did [days] [path]
# or via git:
git did [days] [path]
Show git activity for the last [days] days in [path] (default: 7 days, current directory).
# Current directory, last 7 days
git-did
# 14 days in current directory
git-did 14
# Specific path (default 7 days)
git-did ~/projects
# Specific path and timeframe
git-did 14 ~/projects
# Project mode (group by repository)
git-did --project 3 ~/projects
# Output formats: text (default), json, markdown
git-did --format json 7 ~/projects > report.json
# Date ranges
git-did --since 2025-10-25 --until 2025-10-31 ~/projects
# Works great with xargs
find ~/projects -type d -name ".git" -exec dirname {} \; | xargs -I {} git-did 30 {}
Use git-did --help for all available options.
Configure default behaviors using git config:
# Examples (global configuration)
git config --global did.defaultDays 14
git config --global did.defaultMode project
git config --global did.colors always
git config --global did.defaultFormat markdown
git config --global did.defaultAuthor "user@example.com"
Available configuration keys: did.defaultDays, did.defaultMode, did.colors, did.defaultFormat, did.defaultAuthor.
CLI arguments always override configuration values.
# Filter by author
git-did --author john@example.com 7 ~/projects
# Short mode (overview only)
git-did --short 7 ~/projects
# Combined modes
git-did -ps 14 ~/projects
.didignore file support for path exclusionFAQs
Git activity tracker for standup meetings and project monitoring
We found that git-did demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.