Parse `.git/config` into a JavaScript object. sync or async.
90%
Total Score
98
100
100
100
50
| Title | Versions | Severity |
|---|---|---|
CVE-2025-25975 parse-git-config is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 3.0.0. | 0.0.0 - 3.0.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
ini Version ^1.3.5 | — | — |
git-config-path Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant