
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Make your own badges here!
npm install gh-badges
var badge = require('gh-badges');
badge({ text: [ "build", "passed" ], colorscheme: "green" },
function(svg) {
// svg is a String… of your badge.
});
npm install -g gh-badges
badge build passed :green .png > mybadge.png
# Stored a PNG version of your badge on disk.
git clone git@github.com:badges/gh-badges
cd gh-badges
npm install
sudo npm start
The format is the following:
{
/* Textual information shown, in order. */
"text": [ "build", "passed" ],
"colorscheme": "green"
/* … Or… */
"colorA": "#555",
"colorB": "#4c1"
}
If you want to add a default badge, you only need to modify
default-badges.json
. The format is the same as that given to the API.
If you want to add a colorscheme, head to colorscheme.json
. Each scheme has a
name and a CSS/SVG color for the color used in the first box (for the first
piece of text, field colorA
) and for the one used in the second box (field
colorB
).
"green": {
"colorB": "#4c1"
}
Both colorA
and colorB
have default values. Usually, the first box uses the
same dark grey, so you can rely on that default value by not providing a
"colorA"
field (such as above).
You can also use the "colorA"
and "colorB"
fields directly in the badges if
you don't want to make a color scheme for it. In that case, remove the
"colorscheme"
field altogether.
Because of the usage of the npm module canvas you need to have cairo installed.
For more information check the wiki of the canvas project with system-specific installation details.
Once you have installed the Heroku Toolbelt:
heroku login
heroku create your-app-name
heroku config:set BUILDPACK_URL=https://github.com/mojodna/heroku-buildpack-multi.git#build-env
cp /path/to/Verdana.ttf .
make deploy
heroku open
See https://github.com/h5bp/lazyweb-requests/issues/150.
All work here is licensed CC0.
FAQs
Shields.io badge library
The npm package gh-badges receives a total of 228 weekly downloads. As such, gh-badges popularity was classified as not popular.
We found that gh-badges demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.