GIT-PKGS(1)

πŸ“¦
version 0.21.0 Β· 2 versions
, in nixpkgs unstable

✨ NAME ✨

git-pkgs-vulns-blame β€” bestie, this is the one that shows you who introduced the vulnerabilities you're currently living with πŸ’…

This page lives in the Git Pkgs Manual, so yeah β€” it's a git-pkgs thing, officially πŸŽ€

🌸 SYNOPSIS 🌸

git-pkgs vulns blame [flags]

πŸ¦‹ DESCRIPTION πŸ¦‹

Okay so picture this: your project has vulnerable packages in it right now, and you wanna know who put them there. That's literally the whole gig 🫢

git-pkgs vulns blame attributes your current vulnerabilities to the commits that introduced the vulnerable packages. It shows you which developers added packages that are currently vulnerable. Detective mode: activated πŸ”βœ¨

No cap, it's giving "group project accountability" energy and honestly? Obsessed.

πŸ’– OPTIONS πŸ’–

  • --all-time[=false] β€” include historical vulnerabilities that have been fixed. Default is false, so out of the box you're only looking at stuff that's still a problem πŸ™ˆ
  • -b, --branch="" β€” the branch to query. Default is the first tracked branch πŸ‘‘
  • -e, --ecosystem="" β€” filter by ecosystem, so you can zoom in on just the one you care about 🧚
  • -f, --format="text" β€” output format. Your choices are text and json, and yeah the default is text πŸ’…
  • -h, --help[=false] β€” help for blame. It's defaulting to false because you don't need help, you're doing amazing ✨
  • -s, --severity="" β€” minimum severity. Pick from critical, high, medium, low β€” like a little threat-level ladder 😭πŸ”₯

🌈 OPTIONS INHERITED FROM PARENT COMMANDS 🌈

These come from the parent command, so they're not even blame's fault β€” but they're still yours to use 🫢

  • --color="auto" β€” when to colorize output: auto, always, never. Defaults to auto 🎨
  • --include-submodules[=false] β€” include git submodules when scanning for manifests. Default false. Yes, submodules. We know. πŸ’€
  • -p, --pager[=false] β€” use pager for output. Default false πŸ“„
  • -q, --quiet[=false] β€” suppress non-essential output. Default false, so chatty by default πŸ—£οΈ

πŸ”₯ SEE ALSO πŸ”₯

⭐ HISTORY ⭐

28-Oct-2026 β€” auto generated by spf13/cobra. Not by a human, not by a bestie, by a generator πŸ€–βœ¨


iykyk: every flag up there is real and copied exactly, so go forth and blame responsibly πŸ’œ

that's the whole page, bestie β€” git-pkgs, Oct 2026, slay πŸŽ€

πŸ“¦ where this page comes from