A Git hooks manager for Node.js, Ruby, Python and many other types of projects.
Lefthook is built by Evil Martians, an American design and engineering consultancy for developer tools, AI, and cybersecurity startups.
With Go (>= 1.26):
go install github.com/evilmartians/lefthook/v2@v2.1.14
go get -tool github.com/evilmartians/lefthook/v2@v2.1.14
With NPM:
npm install lefthook --save-dev
For Ruby:
gem install lefthook
For Python:
pipx install lefthook
Installation guide with more ways to install lefthook: apt, brew, winget, and others.
Configure your hooks, install them once and forget about it: rely on the magic underneath.
# Configure your hooks
vim lefthook.yml
# Install them to the git project
lefthook install
# Enjoy your work with git
git add -A && git commit -m '...'
lefthook.yml config options.Gives you more speed. docs
pre-push:
parallel: true
If you want your own list. Custom and prebuilt examples.
pre-commit:
jobs:
- name: lint frontend
run: yarn eslint {staged_files}
- name: lint backend
run: bundle exec rubocop --force-exclusion -- {all_files}
- name: stylelint frontend
files: git diff --name-only HEAD @{push}
run: yarn stylelint {files}
If you want to filter list of files. You could find more glob pattern examples here.
pre-commit:
jobs:
- name: lint backend
glob: "*.rb" # glob filter
exclude:
- "*/application.rb"
- "*/routes.rb"
run: bundle exec rubocop --force-exclusion -- {all_files}
If you want to execute the commands in a relative path
pre-commit:
jobs:
- name: lint backend
root: "api/" # Careful to have only trailing slash
glob: "*.rb" # glob filter
run: bundle exec rubocop -- {all_files}
If oneline commands are not enough, you can execute files. docs
commit-msg:
jobs:
- script: "template_checker"
runner: bash
If you want to control a group of commands. docs
pre-push:
jobs:
- name: audit packages
tags:
- frontend
- linters
run: yarn lint
- name: audit gems
tags:
- backend
- security
run: bundle audit
If you are in the Docker environment. docs
pre-commit:
jobs:
- script: "good_job.js"
runner: docker run -it --rm <container_id_or_name> {cmd}
If you are a frontend/backend developer and want to skip unnecessary commands or override something in Docker. docs
# lefthook-local.yml
pre-push:
exclude_tags:
- frontend
jobs:
- name: audit packages
skip: true
If you want to run hooks group directly.
$ lefthook run pre-commit
If you want to run specific group of commands directly.
fixer:
jobs:
- run: bundle exec rubocop --force-exclusion --safe-auto-correct -- {staged_files}
- run: yarn eslint --fix {staged_files}
$ lefthook run fixer
You can control what lefthook prints with output option.
output:
- execution
- failure
Check examples
Husky is a popular tool for managing Git hooks, similar to Lefthook. It allows developers to run scripts at various stages of the Git workflow. Husky is known for its simplicity and ease of integration with npm scripts. Compared to Lefthook, Husky is more widely adopted and has a larger community, but Lefthook offers more advanced configuration options and better performance for large projects.
Pre-commit is a framework for managing and maintaining multi-language pre-commit hooks. It is more focused on pre-commit hooks specifically, whereas Lefthook provides a broader range of hook types. Pre-commit is language-agnostic and supports a wide variety of hooks out of the box, making it a good choice for projects with diverse technology stacks.
FAQs
Simple git hooks manager
The npm package lefthook receives a total of 2,756,535 weekly downloads. As such, lefthook popularity was classified as popular.
We found that lefthook demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.