
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
GitMarshal is a command-line interface (CLI) to extract and display various statistics about GitHub repositories. The metrics it retrieves include the number of commits, pull requests, issues, stars, and contributors. Whether you're a developer interested in the activity of a repository or a manager tracking the progress of your project, GitMarshal provides an easy way to fetch this data directly from your command line.
:octocat: Fetch and display a summary of your GitHub repositories.
:bar_chart: Fetch and display detailed metrics for a specific repository, including number of commits, pull requests, issues, stars, and contributors.
:computer: Easy-to-use command-line interface.
:wrench: Configurable through environment variables.
:gem: Available as a Ruby gem for easy installation.
Before installing GitMarshal, ensure Ruby (version 2.5 or later) is installed on your system. Check your Ruby version using:
ruby -v
If Ruby is not installed or the version is below 2.5, follow the instructions below to install or upgrade Ruby:
sudo apt-get update
sudo apt-get install ruby-full
brew install ruby
Follow the instructions on the Ruby Installer download page .
To use GitMarshal, generate a GitHub access token:
Now, with Ruby installed and a GitHub token generated, you are ready to install and configure GitMarshal.
GitMarshal can be installed directly as a Ruby gem. To do so, simply run the following command in your terminal:
gem install gitmarshal
This command will download and install the GitMarshal gem onto your system.
To check the installed version of GitMarshal, use the command:
gitmarshal --version
This will display the currently installed version of GitMarshal. If you need to update GitMarshal to the latest version, run the following command:
gem update gitmarshal
This will fetch the latest version of GitMarshal from RubyGems and install it on your system.
To use GitMarshal, an environment variable with your GitHub access token needs to be set up. You can do this by adding the following line to your shell profile file (such as .bashrc
, .bash_profile
, or .zshrc
):
export GITHUB_TOKEN=your_github_token_here
Be sure to replace your_github_token_here
with the token you generated in the Prerequisites step.
Once installed and configured, GitMarshal can be used directly from the command-line as follows:
To fetch and display a summary of all your GitHub repositories, run:
gitmarshal
This will provide you with a comprehensive list of your repositories and will show the number of issues, stars, and forks for each repository.
To fetch and display overall metrics for a specific repository, use:
gitmarshal repo-name
Replace repo-name
with the name of the repository for which you wish to fetch metrics.
-t
Fetch Today's Metrics
gitmarshal repo-name -t
-ch
Fetch Commit History
gitmarshal repo-name -ch
If you need help with the commands or if you are unsure about the functionality of GitMarshal, use the help command:
gitmarshal help
This will display a helpful guide on how to use GitMarshal, its options, and commands.
If you'd like to contribute to the development of GitMarshal, first clone the repository and install the dependencies:
git clone https://github.com/nagstler/gitmarshal.git
cd gitmarshal
bundle install
You can then run the tests with:
rake spec
For a more interactive development experience, start a console with:
bin/console
Your contributions to further improve GitMarshal are most welcome. Whether it's reporting a bug or proposing a new feature, you can help enhance this tool. Feel free to create bug reports and pull requests on our GitHub page at https://github.com/nagstler/gitmarshal .
We aim to maintain a welcoming and inclusive environment for collaboration, and all contributors are expected to adhere to the Contributor Covenant code of conduct.
GitMarshal is open-source and available under the terms of the MIT License .
FAQs
Unknown package
We found that gitmarshal demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.