
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
eleventy-plugin-plausible
Advanced tools
Add the analytics script tag with a shortcode and remove some of the worry
Add the analytics script tag with a shortcode and remove some of the worry :)
const pluginPlausible = require('eleventy-plugin-plausible');
module.exports = function(eleventyConfig) {
eleventyConfig.addPlugin(pluginPlausible, {
domain: 'mywebsite.com'
});
}
This is a pet project of Ginger (ME) and is in no way related to the team at Plausible Analytics. I am lazy and wanted a shortcode to manage the snippet for my different sites, rather than finding where the head is, copy and pasting. This let me put in the shortcode {% plausible %} and then add the plugin with my website and be done with it.
Since this is not maintained by Plausible Analytics, I cannot help you with anything related to their product.
This plugin does 1 thing and 1 thing only, put HTML onto a page. Give it the right domain, and there shouldn't be a problem.
If the snippet that Plausible Analytics uses to track users changes, I will update the template string here when notified. Other than that, there is nothing I can do.
FAQs
Add the analytics script tag with a shortcode and remove some of the worry
We found that eleventy-plugin-plausible demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.