
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
var gitjson = require('git-json')
var git = gitjson()
git.pipe(process.stdout)
git.init()
git.save('mydocument',{foo:'bar',val:2})
git.add('mydocument')
git.commit('first commit')
git.log()
This chart summarizes the functions you will use in working vs staging.
| Working | Staging | |
|---|---|---|
![]() | .save | .add |
![]() | .delete | .remove |
Produces a git log similar to git log --all --decorate

Save content under "file" name into the working directory
Places "file" name into the staging index.
Delete content under "file" name from the working directory
Issues a Remove "file" name order into the staging index
Peforms a commit with message. Optional opts, specify committer and/or author to override git-config globals.
Create a branch with branchname. Call without arguments to get current named branch or detached state HEAD.
Returns the contents at the tip of branchname
Peforms a fast forward merge. Optional opts, specify {noff:true} in the opts to prevent fast forward merges.
Returns true if current branch tip is upstream of branchname
Returns true if branchname is upstream of HEAD
Rebases current branch onto branchname.
Returns the sha-1 hash of item as used in this and Git. Pass an optional second argument true to specify that the object be written into the blob store.
Returns the blob specified by the sha-1 hash.
Sets the git configuration. Typical use is
git.config({user:{email:'joe@bar.com',name:'Joe Bar'}})
Returns the list of all branches and indicates which branch you are on.
Show a tree-based visual representation of the repository
Returns the filehistory of name across all branches. Restrict output with an optional branchname or commit argument.
Please contribute, as I actively monitor discussions and pull requests. Note the TODO list
git remove
NonFF merge with conflicts / rebase with conflicts
garbage collection
multiple parents preservation on merge
rev-parse --verify and other revparse options
#git on freenode. trash icon provided by http://www.aspneticons.com/ Disk icon provided by http://www.aha-soft.com
Copyright (C) 2016 David Wee
License MIT
FAQs
git-json, fully functional git in node
We found that git-json demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.