
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@kjanat/404-page
Advanced tools
Custom 404 error page for KajKowalski Edge.
A storm-themed page that displays "404 - This host is not configured" when a visitor reaches an unconfigured hostname.
The page dynamically inserts the current hostname, features animated lightning bolts over a dark atmospheric background, and automatically activates a calm mode for users who prefer reduced motion.
- run: curl -fsSLo dist/404.html https://esm.sh/@kjanat/404-page/index.html
or use the composite action (writes 404.html into directory):
- uses: kjanat/404@master
with: { directory: dist/site }
The action bakes in mode: path by default, so the page reads as "this link is
broken, the site is fine" with climb-up links — the right voice for Pages, where
a 404 means the path is missing, not the whole host. Set mode: domain for an
unconfigured-host page, or mode: auto to detect at runtime instead.
- uses: kjanat/404@master
with: { directory: dist/site, mode: auto }
Note that mode: auto is weaker than the default on Pages: runtime detection
only upgrades to the path voice when it can prove the site is live — a same-host
referrer or a *.github.io host. A direct hit on a custom Pages domain (or
traffic arriving from another site) falls back to domain voice, which is why
path is baked in by default.
FAQs
Custom 404 error page for KajKowalski Edge.
The npm package @kjanat/404-page receives a total of 42 weekly downloads. As such, @kjanat/404-page popularity was classified as not popular.
We found that @kjanat/404-page demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.