
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
github.com/jeroenheijmans/advent-of-code-charts
This is an unofficial small hacked-up set of charts for a private leaderboard for Advent of Code. Get it as an extension:
It is not a well-architectured, well-written, neat, nice, fluffy, industry-strength piece of code. Instead it's something fun I wanted to make, stepping out of my normal way of coding. NO WARRANTY!
Install dependencies:
npm ci # or npm install
Serve a test website with the dummy data:
npm run start # runs 'serve' and 'watch' in parallel
And open up the URL that's announced in the console.
Run build.ps1
or build.sh
to re-create a /build
folder which is a ready-to-go browser extension.
Test the extension by loading it in the browser.
For full reference, see Chrome's or Firefox's full documentation, but the basics are:
about:debugging
and load a temporary addon (pick the /build/manifest.json
file)chrome://extensions
and load unpacked extension (pick the /build
folder)Test by browsing to a private leaderboard and you should see charts popping up at the bottom.
The code in this project is MIT licensed, with the explicit exception of dummyData.js
.
That file contains JSON in a format thought up by the owner and creator of Advent of Code, but we suppose that using a small snippet of it like this falls under "fair use" (given for one that the AoC website itself suggests using the "JSON API" for integrations, albeit without spamming that API).
Note that "Advent of Code" and "AoC" are Eric Wastl's. This project is not "official", and in no way (directly or indirectly) endorsed by- or affiliated to Advent of Code and its creator/owner. Read more about Advent of Code to learn about the project itself.
Oh, and of course, please consider donating to Advent of Code itself!
Here's what it should more or less look like:
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.