hosted-git-info (npm)

Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab

Advisories

Latest version

10.1.1

Released May 18, 2026

License

ISC

OpenSSF Scorecard

5.6 / 10

How to fix

Upgrading to 3.0.8 or later clears every advisory below that has a fix.

Upgrade commands

npm

npm install hosted-git-info@10.1.1

yarn

yarn add hosted-git-info@10.1.1

pnpm

pnpm add hosted-git-info@10.1.1

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-43f8-2h32-f4cj Regular Expression Denial of Service in hosted-git-info	Medium EPSS 3.61%	`< 2.8.9`	`2.8.9`
GHSA-43f8-2h32-f4cj Regular Expression Denial of Service in hosted-git-info	Medium EPSS 3.61%	`>= 3.0.0, < 3.0.8`	`3.0.8`

Source: git+https://github.com/npm/hosted-git-info.git

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor