Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
git-workspace
Advanced tools
CLI util to keep multiple projects in sync with different remote git repos
A command line utility to manage multiple git-based projects, when each one of them has a different remote repositories or possibly more then one remote repository.
If you are working with Node.js npm-workspace is the perfect companion to this utility
Experimental: use at your own risk
git
executable in the PATHnpm install -g git-workspace
Definition: We will call workspace a directory containing a set of projects.
workspace
├── prj1
├── prj2
├── prj3
└── workspace.json
To get started create a workspace.json
in your workspace dir. It will look like this:
{
"repositories": {
"default": {
"prj1": "git+ssh://example.org/example/repo1"
},
"github": {
"prj2": "git+ssh://example-github.org/example/repo2"
"prj3": "git+ssh://example-github.org/example/repo3"
}
}
}
Repositories are aggregated into groups (in the example above default
and github
). The default
group`
provides the default remote repo if none is specified for a given project and is the one to be picked
when no specific group is specified in the command line.
clone
$ cd workspace
$ git-workspace clone github
Will clone the remote group github
(prj1, prj2, prj3) into the workspace. Project directories must be empty for the clone
to succeed.
push
$ cd workspace
$ git-workspace push
Will push the group default
(prj1) to the remote repo.
pull
$ cd workspace
$ git-workspace pull github
Will pull the changes of the group github
(prj1, prj2, prj3) from the remote repo.
MIT
FAQs
CLI util to keep multiple projects in sync with different remote git repos
We found that git-workspace demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.