
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
git-identity-manager
Advanced tools
The Git Identity Manager simplifies managing multiple Git profiles for personal and work-related repositories. This tool enhances your workflow by enabling you to easily switch between different Git configurations, ensuring correct identity usage for each project.
To get started, install the Git Identity Manager globally using npm. This enables you to use it from any directory:
npm i -g git-identity-manager
Create SSH keys for your personal and work accounts to maintain secure access:
ssh-keygen -t ed25519 -C "email@example.com" -f "~/.ssh/id_ed25519_personal"
ssh-keygen -t ed25519 -C "email@work.com" -f "~/.ssh/id_ed25519_work"
Add your SSH keys to the SSH agent to easily manage your identities:
eval "$(ssh-agent -s)"
ssh-add ~/.ssh/id_ed25519_personal
ssh-add ~/.ssh/id_ed25519_work
Add your SSH keys to your GitHub account for secure access, following the GitHub Documentation.
Edit the ~/.ssh/config file to differentiate your personal and work accounts:
# Personal account
Host github.com-personal
HostName github.com
User git
IdentityFile ~/.ssh/id_ed25519_personal
IdentitiesOnly yes
# Work account
Host github.com-work
HostName github.com
User git
IdentityFile ~/.ssh/id_ed25519_work
IdentitiesOnly yes
Define your Git identities in a .git-identities.json file in your home directory:
{
"personal": {
"name": "John",
"email": "johndoe@example.com",
"customHostName": "github.com-personal"
},
"work": {
"name": "John Doe",
"email": "johndoework@example.com",
"customHostName": "github.com-work"
}
}
Note: Add as many identities as needed. Ensure your GitHub profile matches the name, email, and customHostName.
After installation and configuration, use the git-clone command to clone repositories seamlessly:
git-clone <git-repository-ssh-url>
Select an identity from your configuration to ensure correct profile usage for your projects.
Important: Currently supported only SSH URL
FAQs
A package for switching git profiles
We found that git-identity-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.