`@github/copilot`

Ecosystem:
npm

Package URL:
pkg:npm/@github/copilot

Total PRs:
81 Dependabot PRs

Latest PR:
11 days ago

Unique Repositories:
33 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor

GHSA-9ccr-r5hg-74gf CVE-2026-45033 HIGH published about 1 month ago • updated about 5 hours ago

## Summary A security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project direct...

GitHub Copilot CLI Dangerous Shell Expansion Patterns Enable Arbitrary Code Execution

GHSA-g8r9-g2v8-jv6f CVE-2026-29783 HIGH published 3 months ago • updated about 6 hours ago

## Summary A security vulnerability has been identified in GitHub Copilot CLI's shell tool that could allow arbitrary code execution through craft...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

build(deps): bump the npm_and_yarn group across 4 directories with 12 updates

icanforyouthebest-bot/copilot-sdk #3

1.0.22 → 1.0.43 Patch PR

Closed 11 days ago 1 comment

chore(deps): bump @github/copilot from 1.0.3 to 1.0.51 in /api

AndreaGriffiths11/IssueCrush #185

1.0.3 → 1.0.51 Patch PR

Closed 23 days ago 1 comment

build(deps): bump the npm_and_yarn group across 5 directories with 5 updates

Boo-hub33/vscode #1457

1.0.39 → 1.0.51 Patch PR

Closed 24 days ago 1 comment

Bump the npm_and_yarn group across 8 directories with 10 updates

Boo-hub33/vscode #1451

1.0.39 → 1.0.50 Patch PR

Closed 25 days ago 1 comment

Bump the npm_and_yarn group across 8 directories with 15 updates

Boo-hub33/vscode #1446

1.0.39 → 1.0.48 Patch PR

Closed 25 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates

dporkka/squad #8

1.0.2 → 1.0.47 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 12 directories with 13 updates

mohdazrialbinmohdsaini-beep/vscode #12

1.0.39 → 1.0.46 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump @github/copilot from 1.0.41 to 1.0.45

makaio-ai/makaio-framework #58

1.0.41 → 1.0.45 Patch PR

Open about 1 month ago 14 comments

Bump @github/copilot from 1.0.39 to 1.0.43 in /extensions/copilot

frikke/vscode #1212

1.0.39 → 1.0.43 Patch PR

Open about 1 month ago 2 comments

Bump the all group across 1 directory with 69 updates

spite-triangle/fake-github-copilot-chat #2

1.0.39 → 1.0.49 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 2 updates

Erdemhasates35/quantum-nexus-os #7

1.0.41 → 1.0.45 Patch PR

Open about 1 month ago 2 comments

Bump @github/copilot from 1.0.39 to 1.0.45

microsoft/vscode #315796

1.0.39 → 1.0.45 Patch PR

Closed about 1 month ago 2 comments

build(deps): bump @github/copilot from 1.0.39 to 1.0.51

frikke/vscode #1211

1.0.39 → 1.0.51 Patch PR

Closed about 1 month ago 3 comments

build(deps): bump @github/copilot from 1.0.39 to 1.0.51 in /remote

Jimimaku/vscode #1429

1.0.39 → 1.0.51 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump @github/copilot from 1.0.21 to 1.0.43

BOTOOM/devmentorai #46

1.0.21 → 1.0.43 Patch PR

Open about 1 month ago 1 comment

Bump @github/copilot from 1.0.39 to 1.0.47

ahamedjobayer081-spec/vscode #145

1.0.39 → 1.0.47 Patch PR

Open about 1 month ago 6 comments

deps(deps): bump @github/copilot from 1.0.18 to 1.0.45 in /.github/scripts/workiq-decision-compliance

VeVarunSharma/contoso-vibe-engineering #306

1.0.18 → 1.0.45 Patch PR

Open about 1 month ago 4 comments

chore(deps): bump @github/copilot from 1.0.18 to 1.0.48 in the npm_and_yarn group across 1 directory

georgiosnikitas/brain-break #87

1.0.18 → 1.0.48 Patch PR

Closed about 1 month ago 3 comments

Build(deps): Bump the all-minor-patch group across 1 directory with 8 updates

ChecKMarKDevTools/delegate-action #56

1.0.32 → 1.0.44 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump @github/copilot from 1.0.10 to 1.0.40

agigante80/AgentGate #65

1.0.10 → 1.0.40 Patch PR

Open about 1 month ago 2 comments

Bump the all group across 1 directory with 79 updates

petarkabashki/vs-copilot-demistified #8

1.0.2 → 1.0.40 Patch PR

Closed about 1 month ago 1 comment

Bump the npm-dependencies group across 1 directory with 47 updates

senoldogann/copilot-mobile #78

1.0.36 → 1.0.40 Patch PR

Closed about 1 month ago 1 comment

Bump the npm-dependencies group across 1 directory with 45 updates

senoldogann/copilot-mobile #38

1.0.36 → 1.0.40 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump the npm-dependencies group across 1 directory with 45 updates

senoldogann/copilot-mobile #20

1.0.35 → 1.0.36 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm-dependencies group across 1 directory with 43 updates

senoldogann/copilot-mobile #19

1.0.35 → 1.0.36 Patch PR

Closed about 2 months ago 1 comment

Bump @github/copilot from 1.0.24 to 1.0.36 in /scripts/codegen

github/copilot-sdk-java #99

1.0.24 → 1.0.36 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the all group across 1 directory with 72 updates

gdemontalivet/copilot #11

1.0.34 → 1.0.35 Patch PR

Closed about 2 months ago 1 comment

Bump the all group across 1 directory with 71 updates

gdemontalivet/copilot #9

1.0.28 → 1.0.34 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump @github/copilot from 1.0.10 to 1.0.32

agigante80/AgentGate #55

1.0.10 → 1.0.32 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the all group across 1 directory with 72 updates

microsoft/vscode-copilot-chat #5079

1.0.17 → 1.0.31 Patch PR

Closed about 2 months ago 2 comments

Bump the all group across 1 directory with 71 updates

gdemontalivet/copilot #7

1.0.28 → 1.0.29 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the prod-patch group with 68 updates

alex-macedo/CastorWorks-NG #70

1.0.2 → 1.0.17 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump @github/copilot from 0.0.421 to 0.0.423 in the npm_and_yarn group across 1 directory

agigante80/AgentGate #13

0.0.421 → 0.0.423 Patch PR

Closed 3 months ago 2 comments

Bump the all group across 1 directory with 67 updates

microsoft/vscode-copilot-chat #4341

1.0.2 → 1.0.3 Patch PR

Open 3 months ago 2 comments

Bump @github/copilot from 0.0.422 to 0.0.423

nbr23/claudecode #2

0.0.422 → 0.0.423 Patch PR

Closed 3 months ago 1 comment

Bump the all group across 1 directory with 67 updates

microsoft/vscode-copilot-chat #4253

0.0.421 → 0.0.422 Patch PR

Closed 3 months ago 1 comment

Bump the all group across 1 directory with 66 updates

Kicey/ungithubbed-copilot #7

0.0.420 → 0.0.421 Patch PR

Closed 3 months ago 1 comment

Bump the all group across 1 directory with 64 updates

microsoft/vscode-copilot-chat #4172

0.0.420 → 0.0.421 Patch PR

Closed 3 months ago 1 comment

Bump the all group across 1 directory with 58 updates

microsoft/vscode-copilot-chat #4091

0.0.415 → 0.0.420 Patch PR

Closed 3 months ago 1 comment

Bump the all group across 1 directory with 57 updates

microsoft/vscode-copilot-chat #4052

0.0.415 → 0.0.418 Patch PR

Closed 4 months ago 1 comment

Bump the all group across 1 directory with 56 updates

microsoft/vscode-copilot-chat #3910

0.0.411 → 0.0.413 Patch PR

Closed 4 months ago 1 comment

Bump the all group across 1 directory with 58 updates

microsoft/vscode-copilot-chat #3904

0.0.411 → 0.0.412 Patch PR

Closed 4 months ago 1 comment

Bump the all group across 1 directory with 61 updates

microsoft/vscode-copilot-chat #3875

0.0.411 → 0.0.412 Patch PR

Closed 4 months ago 1 comment

Bump the all group across 1 directory with 59 updates

Kicey/ungithubbed-copilot #4

0.0.388 → 0.0.410 Patch PR

Closed 4 months ago 1 comment

Bump @github/copilot from 0.0.400 to 0.0.409 in /test/harness

Shevchenko0207/natural-gas-analytics-for-5-years #23

0.0.400 → 0.0.409 Patch PR

Closed 4 months ago 1 comment

Build(deps): Bump the all-minor-patch group with 3 updates

ChecKMarKDevTools/delegate-action #28

0.0.393 → 0.0.406 Patch PR

Open 4 months ago 5 comments

Bump @github/copilot from 0.0.393 to 0.0.405

ChecKMarKDevTools/delegate-action #23

0.0.393 → 0.0.405 Patch PR

Open 4 months ago 3 comments

build(deps): bump the npm-packages group in /.npm-packages with 3 updates

mgnsk/dotfiles #247

0.0.400 → 0.0.405 Patch PR

Open 4 months ago 1 comment

Bump @github/copilot from 0.0.400 to 0.0.405 in /test/harness

Shevchenko0207/natural-gas-analytics-for-5-years #20

0.0.400 → 0.0.405 Patch PR

Closed 4 months ago 1 comment

Bump @github/copilot from 0.0.400 to 0.0.403 in /test/harness

Shevchenko0207/natural-gas-analytics-for-5-years #7

0.0.400 → 0.0.403 Patch PR

Closed 4 months ago 1 comment

Package Details

Name:	`@github/copilot`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@github/copilot`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 2

View All npm Advisories

Package Information

Description:

GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal.

Repository:	https://github.com/github/copilot-cli
Homepage:	https://github.com/github/copilot-cli/#readme
Latest Release:	`0.0.336` 8 months ago
Dependent Repos:	0
Dependent Packages:	0
Downloads:	100,665
Ranking:	Top 23.7837% by dependent repos Top 34.3084% by dependent pkgs

PR Status

Open 29 (35.8%)

Merged 0 (0.0%)

Closed 52 (64.2%)

PR Types

Major 6 (7.4%)

Patch 75 (92.6%)