{"id":3527845,"name":"github.com/MichaelMure/git-bug","ecosystem":"go","description":"","homepage":"https://github.com/MichaelMure/git-bug","licenses":"GPL-3.0","normalized_licenses":["GPL-3.0"],"repository_url":"https://github.com/MichaelMure/git-bug","keywords_array":[],"namespace":"github.com/MichaelMure","versions_count":6,"first_release_published_at":"2021-03-21T20:54:54.000Z","latest_release_published_at":"2025-05-19T04:59:55.000Z","latest_release_number":"v0.10.1","last_synced_at":"2026-10-06T09:09:29.860Z","created_at":"2022-04-10T22:52:55.369Z","updated_at":"2026-10-06T09:09:29.860Z","registry_url":"https://pkg.go.dev/github.com/MichaelMure/git-bug","install_command":"go get github.com/MichaelMure/git-bug","documentation_url":"https://pkg.go.dev/github.com/MichaelMure/git-bug#section-documentation","metadata":null,"repo_metadata":{"id":37444659,"uuid":"140680839","full_name":"git-bug/git-bug","owner":"git-bug","description":"Distributed, offline-first bug tracker embedded in git","archived":false,"fork":false,"pushed_at":"2026-09-16T15:33:30.000Z","size":31394,"stargazers_count":10030,"open_issues_count":155,"forks_count":320,"subscribers_count":78,"default_branch":"trunk","last_synced_at":"2026-09-16T15:49:29.146Z","etag":null,"topics":["bugtracker","decentralized-application","distributed-systems","git","gitdb"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/git-bug.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"open_collective":"git-bug"}},"created_at":"2018-07-12T07:55:57.000Z","updated_at":"2026-09-16T15:03:14.000Z","dependencies_parsed_at":"2026-08-10T09:45:55.305Z","dependency_job_id":null,"html_url":"https://github.com/git-bug/git-bug","commit_stats":{"total_commits":1884,"total_committers":75,"mean_commits":25.12,"dds":0.5307855626326964,"last_synced_commit":"d499b6e9d3333334614924669b74640a2d0b5485"},"previous_names":["git-bug/git-bug","michaelmure/git-bug"],"tags_count":14,"template":false,"template_full_name":null,"purl":"pkg:github/git-bug/git-bug","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/git-bug","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/refs/heads/trunk","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37369879,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-16T02:00:06.638Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"git-bug","name":"git-bug","uuid":"73503228","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/73503228?v=4","repositories_count":1,"last_synced_at":"2024-08-06T00:06:16.595Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/git-bug","funding_links":[],"total_stars":8082,"followers":0,"following":0,"created_at":"2024-08-06T00:06:16.932Z","updated_at":"2024-08-06T00:06:16.932Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/git-bug","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/git-bug/repositories"},"tags":[{"name":"v0.10.1","sha":"f2070b53255724f58ce2b70f235fe5cf1b99f2fe","kind":"tag","published_at":"2025-05-19T05:01:08.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/v0.10.1","html_url":"https://github.com/git-bug/git-bug/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@v0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.10.1/manifests"},{"name":"v0.10.0","sha":"44d90317c54c82aacc3f5c25cd0444298ac810f5","kind":"tag","published_at":"2025-05-18T20:51:37.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/v0.10.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"23be684a05ff850d46649a600a35c5799a99d8c0","kind":"tag","published_at":"2025-05-12T05:26:52.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/v0.9.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.9.0/manifests"},{"name":"v0.8.1","sha":"96c7a111a3cb075b5ce485f709c3eb82da121a50","kind":"tag","published_at":"2025-05-07T19:52:40.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/v0.8.1","html_url":"https://github.com/git-bug/git-bug/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@v0.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.8.1/manifests"},{"name":"v0.8.0","sha":"a3fa445a9c76631c4cd16f93e1c1c68a954adef7","kind":"commit","published_at":"2022-11-20T15:26:43.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/v0.8.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.8.0/manifests"},{"name":"v0.7.2","sha":"cc4a93c8ce931b1390c61035b888ad17110b7bd6","kind":"commit","published_at":"2021-03-21T20:54:54.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/v0.7.2","html_url":"https://github.com/git-bug/git-bug/releases/tag/v0.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@v0.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/v0.7.2/manifests"},{"name":"0.7.1","sha":"2d64b85db71a17ff3277bbbf7ac9d8e81f8e416c","kind":"commit","published_at":"2020-04-04T10:48:24.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/0.7.1","html_url":"https://github.com/git-bug/git-bug/releases/tag/0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.7.1/manifests"},{"name":"0.7.0","sha":"71580c41a931a1ad2c04682e0fd701661b716c95","kind":"commit","published_at":"2020-03-01T13:46:52.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/0.7.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.7.0/manifests"},{"name":"0.6.0","sha":"fc568209f073b9d775a09e0dbb8289cf9e5749bf","kind":"commit","published_at":"2019-12-27T19:08:58.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/0.6.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.6.0/manifests"},{"name":"0.5.0","sha":"8d7a2c076a38c89085fd3191a2998efb659650c2","kind":"commit","published_at":"2019-04-21T23:26:01.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/0.5.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.5.0/manifests"},{"name":"0.4.0","sha":"2ab2412771d58a1b1f3bfeb5a6e9da2e683b0e12","kind":"commit","published_at":"2018-10-21T10:33:08.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/0.4.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.4.0/manifests"},{"name":"0.3.0","sha":"ad59f77fd425b00ae4b8d7360a64dc3dc1c73bd0","kind":"commit","published_at":"2018-09-13T16:05:13.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/0.3.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.3.0/manifests"},{"name":"0.2.0","sha":"d959acc29dcbc467790ae87389f9569bb830c8c6","kind":"commit","published_at":"2018-08-17T11:37:50.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/0.2.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.2.0/manifests"},{"name":"0.1.0","sha":"c1a08111b603403d4ee0a78c1214f322fecaa3ca","kind":"commit","published_at":"2018-08-12T19:35:41.000Z","download_url":"https://codeload.github.com/git-bug/git-bug/tar.gz/0.1.0","html_url":"https://github.com/git-bug/git-bug/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/git-bug/git-bug@0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/tags/0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-22T23:32:44.675Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":3.4820259350346543,"dependent_packages_count":9.555658915966655,"stargazers_count":0.7463632254465956,"forks_count":1.8052411062539848,"docker_downloads_count":null,"average":3.8973222956754725},"purl":"pkg:golang/github.com/MichaelMure/git-bug","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW04OTgtaDRwbS1wcWZy","url":"https://github.com/advisories/GHSA-m898-h4pm-pqfr","title":"Arbitrary code execution due to an uncontrolled search path for the git binary","description":"### Impact\n\nThe go language recently addressed a security issue in the way that binaries are found before being executed. Some operating systems like Windows persist to have the current directory being part of the default search path, and having priority over the system-wide path.\n\nThis means that it's possible for a malicious user to craft for example a `git.bat` command, commit it and push it in a repository. Later when git-bug search for the git binary, this malicious executable can take priority  and be executed.\n\n### Who is impacted\n\nThis issue happen on Windows and some other operating systems with a badly configured PATH.\n\nAll version prior to 0.7.2 are vulnerable to this issue.\n\n### Patches\n\nVersion 0.7.2 fix this issue. Users should update as soon as possible.\n\n### References\n\nMore details about this issue can be found [here](https://blog.golang.org/path-security).","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2021-05-25T18:44:09.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-28955","https://github.com/MichaelMure/git-bug/pull/604","https://vuln.ryotak.me/advisories/18","https://github.com/git-bug/git-bug/security/advisories/GHSA-m898-h4pm-pqfr","https://github.com/advisories/GHSA-m898-h4pm-pqfr"],"source_kind":"github","identifiers":["GHSA-m898-h4pm-pqfr","CVE-2021-28955"],"repository_url":"https://github.com/MichaelMure/git-bug","blast_radius":0.0,"created_at":"2022-12-21T16:13:01.155Z","updated_at":"2026-09-28T20:13:05.844Z","epss_percentage":0.01719,"epss_percentile":0.76533,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW04OTgtaDRwbS1wcWZy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW04OTgtaDRwbS1wcWZy","packages":[{"ecosystem":"go","package_name":"github.com/MichaelMure/git-bug","versions":[{"first_patched_version":"0.7.2","vulnerable_version_range":"\u003c 0.7.2"}],"purl":"pkg:go/github.com%2FMichaelMure%2Fgit-bug"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW04OTgtaDRwbS1wcWZy/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/MichaelMure/git-bug","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/MichaelMure/git-bug","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/MichaelMure/git-bug/dependencies","status":null,"funding_links":["https://opencollective.com/git-bug"],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-21T23:47:57.951Z","issues_count":201,"pull_requests_count":410,"avg_time_to_close_issue":33426940.39473684,"avg_time_to_close_pull_request":10478399.764872521,"issues_closed_count":75,"pull_requests_closed_count":353,"pull_request_authors_count":49,"issue_authors_count":107,"avg_comments_per_issue":4.751243781094527,"avg_comments_per_pull_request":1.329268292682927,"merged_pull_requests_count":170,"bot_issues_count":1,"bot_pull_requests_count":177,"past_year_issues_count":15,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":157597.4,"past_year_avg_time_to_close_pull_request":922467.25,"past_year_issues_closed_count":5,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":1.2666666666666666,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":9,"past_year_merged_pull_requests_count":7,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/git-bug%2Fgit-bug/issues","maintainers":[{"login":"MichaelMure","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/MichaelMure"},{"login":"sudoforge","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sudoforge"},{"login":"smoyer64","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smoyer64"},{"login":"adamslc","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/adamslc"},{"login":"sandhose","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sandhose"},{"login":"rng-dynamics","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rng-dynamics"},{"login":"cheshirekow","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cheshirekow"},{"login":"vincetiu8","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vincetiu8"},{"login":"DmitriyShev19","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DmitriyShev19"},{"login":"ludovicm67","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ludovicm67"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMichaelMure%2Fgit-bug/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMichaelMure%2Fgit-bug/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMichaelMure%2Fgit-bug/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMichaelMure%2Fgit-bug/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMichaelMure%2Fgit-bug/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMichaelMure%2Fgit-bug/codemeta","maintainers":[]}