
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

gitsie is a package manager for projets hosted on GitHub. It's covinient to use, and works similar to package managers like apt.
You must have npm installed before installing gitsie.
Install gitsie as follows:
$ npm install -g gitsie
This will install gitsie globally on your system. Next, check that it's working properly:
$ gitsie
gitsie: The github package manager
Usage: gitsie [options] [package]
Options:
-s / search Search for package
-r / retrieve Download project sources
-d / delete Remove project sources
-i / install Unpack sources to intended location
-h / help Show this help message
Retrieving a repository from GitHub is as easy as:
$ gitsie -r user/repo
then, unpack the sources to wherever you like, by:
$ gitsie -i user/repo path/to/some/place
The source packages of a repository stay stored on your system until you remove them. To delete a repository from your system, run:
$ gitsie -d user/repo
From a developer's point of view, gitsie gives you much needed flexiblity. There are 4 different sripts that trigger on 4 important events: when your repo is being downloaded by the user, before and after the user has installed the repo, and before the user deletes your repo. Customize the 4 scripts to your preference an you have 100% control over your user's experience.
unlike many of the popular package managers, gitsie doesn't come with all the bloat. the entire project size is about 4 MB, and that includes all the third party libraries, and other redundant stuff.
As mentioned earlier, all you have to do to customize the user's experience is to edit the 4 control scripts. You may have an interactive build system with issue-resolving; you can implement a system-setup using the post-install script. The choice is yours.
FAQs
Github Package manager
We found that gitsie demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.