
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@mightbeandrew/devcard
Advanced tools
Generate a beautiful developer trading card from your GitHub profile
Generate a beautiful developer trading card from any GitHub profile — one command, zero setup.
npx @mightbeandrew/devcard YOUR_GITHUB_USERNAME
That's it. No install, no config. A PNG is saved to your current directory.
npx @mightbeandrew/devcard torvalds
Generates devcard-torvalds.png — a full trading card with stats, top repos, and languages.
| Theme | Auto-detected for |
|---|---|
electric | JavaScript, TypeScript |
fire | Python, Ruby |
water | Go, Kotlin, Swift, Java |
earth | C, C++, Rust, Assembly |
psychic | Haskell, Scala, Clojure, Elixir |
dark | Default / C#, PHP, Shell |
light | Light mode |
holo | Holographic (force with --theme holo) |
npx @mightbeandrew/devcard <username> [options]
Options:
-o, --output <path> Output file path (default: devcard-<username>.png)
-t, --theme <theme> Force a theme (auto|dark|light|holo|fire|water|electric|psychic|earth)
--token <token> GitHub token for higher rate limits (or set GITHUB_TOKEN)
--no-preview Skip terminal preview
--open Auto-open the PNG after saving
--no-cache Bypass the 1-hour local cache
--copy Copy file path to clipboard
-v, --version Show version
-h, --help Show help
| Card Stat | GitHub Data | Formula |
|---|---|---|
| ❤ HP | Total stars | log scale (max 50k) |
| ⚔ ATK | Total commits (approx) | log scale (max 100k) |
| 🛡 DEF | Followers | log scale (max 100k) |
| 📅 SPD | Account age | linear (max 15 years) |
| 📦 LVL | Public repos | log scale (max 1000) |
| Tier | Criteria |
|---|---|
| COMMON | < 100 followers & < 50 stars |
| UNCOMMON | < 1k followers & < 500 stars |
| RARE | Default for active developers |
| ULTRA RARE ✦ | > 10k followers or > 5k stars |
| SECRET RARE ✦✦ | > 100k followers or > 50k stars |
| LEGENDARY ✦✦✦ | > 150k followers or > 100k stars |
After generating your card, add it to your profile README:

npx devcard YOUR_USERNAMEdevcard-YOUR_USERNAME.png to your profile repoREADME.mdWithout a token: 60 requests/hour (1 card per run = 4 requests — plenty for normal use).
For higher limits: npx devcard username --token YOUR_TOKEN or set GITHUB_TOKEN env var.
Get a token (no scopes needed for public data): https://github.com/settings/tokens
Post your card with #devcard on Twitter/X or LinkedIn!
MIT
FAQs
Generate a beautiful developer trading card from your GitHub profile
The npm package @mightbeandrew/devcard receives a total of 3 weekly downloads. As such, @mightbeandrew/devcard popularity was classified as not popular.
We found that @mightbeandrew/devcard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.