Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
= TempGit
{}[http://travis-ci.org/CodeGnome/tempgit]
== Copyright and Licensing
=== Copyright Notice
Copyright 2011 Todd A. Jacobs
All rights reserved.
=== Software License
http://www.gnu.org/graphics/gplv3-88x31.png
The software is licensed under the GPLv3[http://www.gnu.org/copyleft/gpl.html]. The LICENSE is also included in the source tree.
=== README License
http://i.creativecommons.org/l/by-nc-sa/3.0/us/88x31.png
{Creative Commons Attribution-NonCommercial-ShareAlike 3.0 United States License}[http://creativecommons.org/licenses/by-nc-sa/3.0/us/]
== Purpose
Have you ever wanted to exercise some Git functionality in your unit or functional tests? The TempGit gem is designed to make life easier--and your filesystem cleaner--when writing Git-related tests.
== Key Features
TempGit has some killer features to ease Git-related testing.
Instantiate as many Git repositories as you need for testing, each with its own unique directory context.
Doesn't rely on potentially-shared environment variables for GIT_DIR or GIT_WORK_TREE. Each instance stores its own directory values.
Execute arbitrary Git commands in an instantiated context. If Git can run it, TempGit can run it, too.
Won't clutter or clobber your current working directory.
Cleans up after itself.
== Installation and Usage
This gem has been tested against Ruby 1.9.2. It definitly doesn't work with Ruby 1.8.7, but patches are welcome.
=== Installing the Gem
gem install tempgit
=== Using the Library
require 'tempgit'
=== Example Usage
repo = TempGit::GitDir.new
puts repo.git('log')
repo.add_new_file
puts repo.git('status')
repo.commit_with_sequence_number
puts repo.git('log')
== Further Reading
FAQs
Unknown package
We found that tempgit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.