
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
GitPlan is a Git-based Kanban board system that uses your file system as a database. Create boards by making folders, add issues as markdown files, and configure columns with JSON files.
Init demo
npx gitplan init
Start gitplan
npx gitplan
your-folder/
├── boards/
│ ├── personal-goals.view.json # Board configuration
│ ├── markiting.view.json # Board configuration
│ └── ...
├── issues/
│ ├── feature-request.md # Issue as markdown file
│ ├── another-feature-request.md # Issue as markdown file
│ └── ...
└── ...
Configure your board columns and filtering with a view.json file:
Issues are markdown files with frontmatter:
---
title: Implement User Authentication
status: in-progress
priority: high
assignee: john-doe
labels: ["backend", "security"]
createdAt: 2024-01-15
estimatedHours: 16
---
# Issue Description
Your issue content goes here in markdown format.
## Requirements
- [ ] Requirement 1
- [ ] Requirement 2
- [x] Completed requirement
## Notes
Any additional notes or details.
GitPlan supports powerful filtering in your view.json:
{
"status": "todo",
"priority": "high",
"assignee": "john-doe"
}
This repository includes a demo project in the demo-project/ folder with three example boards:
To try the demo:
cd demo-project
npx gitplan
# Clone the repository
git clone <repository-url>
cd gitplan
# Install dependencies
npm install
# or
yarn install
# Test the CLI
npm run test:cli
# or
yarn test:cli
# Start Next.js development server
npm run dev
# or
yarn dev
# Build for production
npm run build
# or
yarn build
# Start production server
npm start
# or
yarn start
# Build everything and publish to npm
cd publish && npm publish
The CLI will be available as gitplan command globally after installation.
MIT License - see LICENSE file for details.
FAQs
Git-based Kanban board system
We found that gitplan demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.