search

libgit2 / libgit2.github.io

libgit2 website
http://github.org/
MIT License
109 stars 67 forks source link

Consider removing the nodegit link #117

Open Yogu opened 7 months ago

Yogu commented 7 months ago

libgit2.org lists nodegit as a Node.js binding of libgit2. However, the last stable release of nodegit is from 2020, there are no prebuilt binaries for any supported Node.js version anymore (only Node 16), and it depends on the long-deprecated "request" library that has security vulnerabilities. There are several issues asking about the project state without replies from the maintainers.

Developers looking for a library to use Git in Node.js will likely just get frustrated when they start with using Node.js.

ethomson commented 7 months ago

Is there a better alternative?

Yogu commented 7 months ago

I don't think there is an alternative in terms of JavaScript libgit2 bindings. There are alternatives to using libgit2 altogether, e.g. isomorphic-git (a JavaScript implementation of git) or simple-git (a JavaScript wrapper around the regular Git binary)

There is a fork of nodegit by figma with pre-built binaries for Node 18 and Node 20, but this is still far from a maintained open-source project