parse-git-config

v3.0.0npm· JavaScript

Parse `.git/config` into a JavaScript object. sync or async.

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security1 advisory

LicensePermissive

DepsLean

Maintenance

Last published 7 years ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

MIT

Dependencies

2 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Prototype Pollution Vulnerability in parse-git-config
GHSA-8g77-54rh-46hx Published 2025-03-12

Recent releases