ggit has 2 known vulnerabilities on the latest version (2.4.12). DepScope rates its health at 48/100 (high risk).

What is the latest version of ggit?

The latest version of ggit is 2.4.12, released 2019-08-09.

Does ggit have known vulnerabilities?

Yes. ggit has 2 known vulnerabilities. See depscope.dev/pkg/npm/ggit for details.

No, ggit is actively maintained. Latest release: 2.4.12 (2019-08-09).

What are alternatives to ggit?

Popular alternatives to ggit in npm include: ?, semver, minimatch, debug, ansi-styles.

ggit

npmv2.4.12

Local promise-returning git command wrappers

License MITpermissive100 versions1 maintainers21 deps10,889 weekly dl

bahmutov/ggit

/ 100

Health

use with caution

[email protected] low health (48/100) — consider alternatives

Moderate health score (48/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

10/20

popularity

21/25

security

15/15

maturity

2/15

community

Vulnerabilities

2 medium

Advisories (2)

Severity	ID	Summary	Fixed in
medium	CVE-2024-21532	ggit is vulnerable to Command Injection via the fetchTags(branch) API	—
medium	CVE-2024-21533	ggit is vulnerable to Arbitrary Argument Injection via the clone() API	—

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (21)

always-error bluebird chdir-promise check-more-types cli-table colors commander d3-helpers debug find-up glob lazy-ass lodash moment moment-timezone optimist pluralize q quote ramda semver

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/ggit