
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@ikerin/build-readme
Advanced tools
A cli tool to replace each example block with an actual file from examples
import { resolve } from '@ovotech/json-schema';
resolve({});
With running
yarn build-readme README.md
You would copy the contents of the actual examples/simple.ts file into the following codeblock.
It also supports extracting bits of the example file, with "sections". You will need to wrap the desired code inside of the referenced file with // << section-name (...) // section-name. The resulting url will also contain direct link to the section, when viewed in github.
import { resolve } from '@ovotech/json-schema';
// << test-section
resolve({});
// test-section
This way you can keep your examples as executable files, and automatically update your readme files when you make changes, so none of your examples get out of date.
There is also support for # style comments
---
openapi: 3.0.0
info:
# << test-section
title: Simple API
version: 1.0.0
# test-section
servers:
- url: 'http: //localhost:3333'
You'll need to start a postgres instance to run the tests for some of the exmaples
docker-compose -f examples/docker-compose.yaml up
You can then run the tests with:
yarn test
Style is maintained with prettier and eslint
yarn lint
Deployment is done by github when you create a new release in github.
Have a bug? File an issue with a simple example that reproduces this so we can take a look & confirm.
Want to make a change? Submit a PR, explain why it's useful, and make sure you've updated the docs (this file) and the tests (see test folder).
This project is licensed under Apache 2 - see the LICENSE file for details
FAQs
Replace each example block with an actual file from examples
The npm package @ikerin/build-readme receives a total of 149 weekly downloads. As such, @ikerin/build-readme popularity was classified as not popular.
We found that @ikerin/build-readme demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.

Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.

Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.