npm-git-publish

v0.2.4-betanpm· JavaScript

Dev tool to publish an NPM package to a remote Git repository, instead of a registry or CDN of tarballs

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security1 advisory

LicensePermissive

DepsModerate

Maintenance

Last published 9 years ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

MIT

Dependencies

6 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Command Injection in npm-git-publish
GHSA-49mg-94fc-2fx6 Published 2020-09-04

Recent releases