Is parse-git-config safe to use?

parse-git-config has 1 known vulnerabilities on the latest version (3.0.0). DepScope rates its health at 53/100 (high risk).

What is the latest version of parse-git-config?

The latest version of parse-git-config is 3.0.0, released 2018-11-20.

Does parse-git-config have known vulnerabilities?

Yes. parse-git-config has 1 known vulnerabilities. See depscope.dev/pkg/npm/parse-git-config for details.

Is parse-git-config deprecated?

No, parse-git-config is actively maintained. Latest release: 3.0.0 (2018-11-20).

What are alternatives to parse-git-config?

Popular alternatives to parse-git-config in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does parse-git-config use?

parse-git-config is licensed under MIT.

parse-git-config

npmv3.0.0

Parse `.git/config` into a JavaScript object. sync or async.

License MITpermissive19 versions2 maintainers2 deps816,145 weekly dl

jonschlinkert/parse-git-config

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Moderate health score (53/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

20/25

security

15/15

maturity

4/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2025-25975	Prototype Pollution Vulnerability in parse-git-config	—

Bundle & TypeScript

📦

Bundle Size

4.4 KBminified

1.9 KB gzipped

2 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/parse-git-config (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (2)

git-config-path ini

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/parse-git-config