
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
gitenforcer
Advanced tools
GitEnforcer is a small bot that you would run on your own server to monitor github pull requests. It comes with a very basic interface to allow you to watch or unwatch your repos. Any time a pull request is created, updated, or commented on, all defined middleware are run. If any middleware fails, the pull request status is set to failed with the reason returned by that failing middleware. If they all pass, the merge button remains green.
Configuration is an object containing the following parameters
Middleware are functions defined as
function myMiddleware(pull_request, comments, next) { }
The pull_request object contains all the metadata github returns for a pull request as defined here
Comments is an array of comments on that pull request as defined here
Next is the callback function you should run when your check is complete. If you return no parameter, GitEnforcer will continue execution on the next middleware. If you specify a paramater (as a string) then execution of middleware stops, and that string is set as the reason for failure on the pull request's status.
var gitenforcer = require('gitenforcer'),
app = gitenforcer(config);
app.listen(3000);
For basic usage, see example.js
To watch or unwatch a repo, visit the server in your browser.
FAQs
a small bot to monitor pull requests
The npm package gitenforcer receives a total of 4 weekly downloads. As such, gitenforcer popularity was classified as not popular.
We found that gitenforcer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.