v1.0.3

Updated README.md and package.json description to better reflect the package’s purpose: “Use natural language to run git.”

v1.0.2

Updated README.md to showcase the CLI output for example:

querygit "show me the last commit message"

v1.0.1

This patch release addresses a critical security vulnerability in the git command execution and updated the output format.

Security Fixes

• Replaced execSync with spawnSync: The previous implementation used execSync with a string argument, which allowed shell metacharacters (;, &&, ||, |, backticks, $()) to be interpreted by the shell. This could potentially allow remote code execution through prompt injection attacks.
• Array-based command execution: Commands are now executed using spawnSync with an array of arguments, preventing shell interpretation of user input.
• Improved argument tokenization: Added proper tokenization to handle quoted arguments correctly while maintaining security.

Features

New Output Format

The CLI output has been reorganized into a cleaner, more readable format:

  Model
  -------
  llama3.1-8b (Cerebras)

  Command
  -------
  git log -1

  Result
  -------
  abc1234 Commit message

v1.0.0

Initial release of querygit.

querygit lets you ask questions about your Git repository using natural language.

It helps developers explore commits, history and repository information without writing complex git commands.

Under the hood, querygit uses the Cerebras API with a fixed model: Llama 3.1 8B.

Features

• Ask questions about your repository using natural language
• Simple CLI interface

Example

querygit "what was the last commit"