
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Manage your meta repo and child git repositories.
git plugin for meta
➜ meta git
Usage: meta-git [options] [command]
Commands:
branch List, create, or delete branches
checkout Switch branches or restore working tree files
clean Remove untracked files from the working tree
clone Clone meta and child repositories into new directories
pull Fetch from and integrate with another repository or a local branch
push Update remote refs along with associated objects
remote Manage set of tracked repositories
status Show the working tree status
tag Create, list, delete or verify a tag object signed with GPG
update Clone any repos that exist in your .meta file but aren't cloned locally
help [cmd] display help for [cmd]
Options:
-h, --help output usage information
Clones a meta repository and it's child repositories.
meta git clone <repo>
Clones any child repositories from the .meta file that are missing.
meta git clone <repo>
Track your progress on all branches at once:
meta git status
View what branches exist on all your repos:
meta git branch
Create new branches on all your repos at once:
meta git checkout -b [branch-name]
Check out an existing branch in all projects:
meta git checkout main
Revert all modified files to their remote status:
meta git checkout .
Remove unwanted untracked files on all repos:
meta git clean -fd
FAQs
git plugin for meta
We found that meta-git demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.