The git flag --end-of-options was added in git 2.24.0 to prevent argument injection attacks by marking the end of option parsing, but most package managers still use -- or a leading-dash check instead. Only Go's cmd/go and vcpkg use --end-of-options, while others rely on minimum git version requirements or use in-process git implementations to avoid the issue.