
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Run git commands in all git subdirectories
_ _ _ _
__ _ (_) | |_ __| | (_) _ __ ___
/ _` | | | | __| _____ / _` | | | | '__| / __|
| (_| | | | | |_ |_____| | (_| | | | | | \__ \
\__, | |_| \__| \__,_| |_| |_| |___/
|___/
npm install git-dirs -g
# view
npx git-dirs status -s # show status of each repo
npx git-dirs branch # view branches in each repo
npx git-dirs check-ignore # view ignored files
# update
npx git-dirs fetch # download objects in each repo
npx git-dirs pull # pull out of date repos
npx git-dirs clean # remove ignored files
# other
npx git-dirs xargs <whatever> # run any command against all child repos
# todo
npx git-dirs checkout [default] # checkout branch in each repo
npx git-dirs prune # delete unnecessary local -branches
npx git-dirs clone <project> # delete unnecessary local -branches
$ npx git-dirs help
# Usage: git-dirs [options] [command]
#
# Options:
# -V, --version output the version number
# -h, --help display help for command
#
# Commands:
# status [options] show the working tree status
# help [command] display help for command
$ npx git-dirs status --help
# show the working tree status
#
# Options:
# -d, --dir <path> path other than current directory
# -s, --short show statuses in a single line per repo
# -h, --hide-headers hide group headers in output
# -f, --filter <filter> filter results (choices: "all", "dirty", default: "all")
# --help display help for command
Automate Deploy w/ Github Actions
Show Progress updates while downloading
Auto Generate --help Docs
Add -i|--interactive flag
Add -r|--recursive flag
Add -f|--force flag
Add Alpha Order (Sort)
.addOption(new Option('-o, --order <sort>', 'sort order').choices(Object.values(StatusOrderTypes)).default(StatusOrderTypes.status))
Add Commands
FAQs
Run git commands in all git subdirectories
We found that git-dirs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.