Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
It's a tool to facilitate the remote pair programming session. Instead of make a lot of git add, git commit, git push, git pull
, you can make it more quickly only running devpair start <timer optional>
to start coding and devpair next
to send the code to another person.
Very useful for teams that like to make pair sessions often. If you never was a driver or a navigator feel free to read here to have a context.
pip install devpair
devpair start <time in minutes optional>
Start a new session inside the current branch.devpair next
Save everything and send to the next person.devpair done
Finish and put all the work in the original branch.devpair summary
Show a simple resume of commit counts and last developer.devpair cow
It's a cow.devpair timer <time in minutes>
Create a simple timer for any purposal.devpair --help
I like to have a help some times.We recommend to create some alias if you want, like:
dvs
to rundevpair start
,dvn
to rundevpair next
anddvd
to rundevpair done
.
# Dev A
main $ devpair start 10 # Will start the new branch with a 10 minutes timer
pair/main $ echo "hello" > welcome.txt
pair/main $ devpair next
# Dev B
main $ devpair start
pair/main $ cat welcome.txt # shows "hello"
pair/main $ echo " world" >> welcome.txt
pair/main $ devpair next
# Dev A
pair/main $ devpair start
pair/main $ cat welcome.txt # shows "hello world"
pair/main $ echo "!" >> welcome.txt
pair/main $ devpair done
main $ git commit -m "feat: created hello world feature"
main $ git push
# Dev B
pair/main $ devpair done # just to come back to the original branch
main
You will work inside a temporary pair branch that in the end all the commits will be squashed to be added to the feature branch.
Ok ok! Under the hood the devpair start
will take your current branch and create a copy with the same name but with the prefix pair
After make your code changes the devpair next
will add, commit and push your code using an internal commit message. This step will be more easier to understand checking the example step by step
In the end, we have the devpair done
that will add, commit, push and delete the branch. Don't worry we will make a squash commit of everything that you did for the current branch.
timer
, maybe devpair
timer or any other one, the important thing is to keep the pair rotation:
devpair start <time in minutes>
driver
need to share the screen avoiding to use tools like vscode live share
, even they are good it can create some hard moments that you want to show the browser or create a quickly diagram. The preference is that the driver
ever need to share the screen.Fork, create a branch from main
with the pattern feat/my-feature
and make a pull request with your proposal.
We are using poetry and pyenv to manage all the python versions and dependencies.
# Install all the dependencies
make setup
# Run all the tests
make unit
# Testing the devpair locally
make local
sh ./scripts/tag-new-version.bash v0.0.0
Illustration by: popsy
FAQs
Pair script that manage a pair programming session using git.
We found that devpair demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.