
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

bleak is a stunning theme for the Ghost blog platform. It features full-section images and a slick responsive design that puts the right content right in your readers' faces. See some more screenshots below, or see it in action on my blog, unwttng.com.
We'll talk about how insanely customisable bleak is in a second, but if you just want to get started, it works without any configuration too.
Get the .zip file for the latest version here, and install it however you normally do:
content/themes/ directory and
extract it with unzip -o bleak.zip.bleak is super configurable. It supports Google Analytics, Disqus integration and a whole suite of social profile links. And the best thing is, not a single bit of it requires you to hack around with the theme's files. It works right out of the box, and you can set it up however you like using the Ghost admin interface.
All theme configuration is done by adding one-line items to your Ghost blog header via the
code injection interface at yourblog.com/ghost/settings/code-injection.
Got a Google Analytics tracking ID? Instantly enable tracking on your blog by adding the following line to header code injection:
<script>window._bleak.googleAnalyticsId = 'UA-12345678-1';</script>
To integrate a bleak blog with Disqus, you just need a Disqus username. Drop it into your configuration with this one line in the header code injection interface:
<script>window._bleak.disqusUsername = 'mydisqususername';</script>
Done! Disqus threads will now appear on all of your posts.
bleak supports a wide range of social profile links. Configuring any of these will cause the appropriate navigation items to appear in your sidebar.
For any network listed below, just configure window._bleak.<socialnetwork>Username in your
blog header code injection. For example, to add a navigation item to your Twitter profile, you
would add:
<script>window._bleak.twitterUsername = 'unwttng';</script>
As if by magic, you now have a social links bar in your sidebar with a Twitter-icon link.
Which networks are available?
window._bleak.bitbucketUsername = '...';window._bleak.deviantartUsername = '...';window._bleak.facebookUsername = '...';window._bleak.flickrUsername = '...';window._bleak.githubUsername = '...';window._bleak.instagramUsername = '...';window._bleak.linkedinUsername = '...';window._bleak.pinterestUsername = '...';window._bleak.soundcloudUsername = '...';window._bleak.twitchUsername = '...';window._bleak.twitterUsername = '...';window._bleak.vimeoUsername = '...';window._bleak.youtubeUsername = '...';The theme looks best when you use one, two or three of the above in combination!



bleak is responsive, switching to a tailored vertical layout with the right content top and center when on small devices.



FAQs
An in-your-face theme for the Ghost blogging platform
The npm package bleak receives a total of 15 weekly downloads. As such, bleak popularity was classified as not popular.
We found that bleak demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.