Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
git-pending
Advanced tools
> Git plugin to list todo, fixme, testme and docme comments with verbose details
Git plugin to list todo, fixme, testme and docme comments with verbose details
Run the command below to install the plugin
npm install -g git-pending
Open any git repository and run below command
git pending
This will list all the pending TODO
, FIXME
, TESTME
and DOCME
comments
Here is the list of options that you can pass to modify the output of git pending
git pending [--oneline|-o ]
[--type|-t <fixme|testme|docme|todo>]
[--author|-a <author>]
[--no-stats]
[--strict]
[--help]
[--version]
Here is the list of sample usage examples
git pending # All TODO, FIXME, DOCME or TESTME comments with commit details
git pending --no-stats # Comments without stats
git pending --oneline # Comments with only date
git pending --type fixme # Only the fixme comments
git pending --author kamran # Comments from specific author
git pending -t fixme -a kamran # FIXME comments from specific author
git pending -t fixme -o # Non-verbose fixme comments
# By default, it looks for text todo, fixme, testme and docme anywhere
# in the comment. If you want to make the checks strict i.e. only match
# @todo, @fixme, @testme and @docme, then use --strict flag
git pending --strict
If you don't pass
--author
flag, it will show you the comments from everyone
git pending --author kamran --oneline
Not passing
--oneline
flag will give you the detailed output with commit that introduced the comment
git pending --author kamran
Use
--type
flag to specify the type of comments you need. Possible values (TODO
,FIXME
,TESTME
,DOCME
)
git pending --type TODO
git pending --type TESTME
git pending --type FIXME
git pending --type DOCME
MIT © Kamran Ahmed
FAQs
> Git plugin to list todo, fixme, testme and docme comments with verbose details
The npm package git-pending receives a total of 1 weekly downloads. As such, git-pending popularity was classified as not popular.
We found that git-pending demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.