Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
feltnerm-pelican-theme
Advanced tools
This the front-end module of my Pelican-powered blog.
To use, set your pelican theme to this theme. A few of (my current) methods for accomplishing this are:
npm
% npm install --save feltnerm-pelican-theme
Iff ./node_modules
is a direct child of your Pelican working-directory, then in pelicanconf.py
you add/modify the following:
THEME = 'node_modules/feltnerm-pelican-theme'
./src/css
Normalize is used (as it should), Typset is used for typographic things such as post bodies, and flexboxgrid is a simple wrapper for grid-based layouts using flexbox (sorry <=IE10 users).
./src/js
./build/bundle.js
Templates are written using Jinja and follow the pelican template conventions. They are 'compiled' with pelican. See the pelican theme documentation for more details.
Templates should follow semantic HTML5 (header, footer, nav, article, aside, section, etc.), and attempt to follow the microdata HTML5 standard as best as possible.
I am not entirely sure of the benefits of microdata in HTML documents yet, but consider this an experiment. Part of me wonders if it'd be possible to make static HTML pages into APIs if their markup was more machine readable.
Many of the templates have basic microdata elements defined, but if one is missing please submit an issue/pull-request!
All sources are combined into a bundle in ./static
.
build
Runs [browserify]((http://browserify.org/) and [minifyify]((https://npmjs.com/packages/minifyify) over the sources and creates a standalone bundle with sourcemap.
This will always be the script that generates the JS bundle in
origin/master
and npm
.
FAQs
Mark Feltner's theme for his Pelican-powered blog
The npm package feltnerm-pelican-theme receives a total of 6 weekly downloads. As such, feltnerm-pelican-theme popularity was classified as not popular.
We found that feltnerm-pelican-theme demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.