
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Install Git repos using a script. This app installs gits from an array, and places them in desired location. After each installation, npm link is performed on a repo so make sure it is an npm package. After you can add it to your package.json for intellisense ("rep-name":"file:gits/rep-name").
$ npm i gitme2
preinstall scriptprocess.envMore examples in ./example.js
const GitMe = require('gitme2')()
/**
* GitMe.exampleRepo << following this setup
* recommendations: `do not include your "GitMe installs" in the same dir as your project!, treat it as ./local_node_modules or ./gits` for example.
*/
const opts = {
gitRepos: {
// replace with existing repositories !
['projectName']: {
exec: `git clone git@bitbucket.org/authourName/projectName.git`,
folder: `./gits/projectName`
},
['projectName2']: {
exec: `git clone https://github.com/authourName/projectName2.git`,
folder: `./gits/projectName2`
},
// and so on
}
}
const git = new GitMe(opts)
const results = await git.install()
// const relinked = await git.relink() // if npm syslink got missing, try to relink them
| METHODS | RETURN | DESCRIPTION |
|---|---|---|
| install() | promise | Start installing gitRepos, return results after all complete, or return errors |
| relink() | promise | when already installed, your repos and syslink got missing? You can use it to relink them! |
Have questions, or would like to submit feedback, contact eaglex
FAQs
install git repos via script
The npm package gitme2 receives a total of 2 weekly downloads. As such, gitme2 popularity was classified as not popular.
We found that gitme2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.