
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
The lib to symulate manage blogs through Github repo with fildDB easily.
Use independent repo as blogs, SRP(Single Responsibility Principle)
Use file DB to simulate oprations with blogs instead files.
Easy to generate blog index
Generate the blogs index based on the Github YAML favoured Markedown file, and save it to a file for later to use. It it not need when later update the content in Github.
Blogs should be nested in any level under the blog folder, all the nested will be take as the categories of the blogs.
build.js at the root fo the repo folder as the script to do the work.// build.js
const GHBlog = require('gh-blogs');
const blogRepo = 'https://github.com/ole3021/blogs';
const options = {
folder: './blogs', // path for the blogs folder
dbFile: './blogs.db' // file path for the db file
};
const myBlogs = new GHBlog(blogRepo, options);
const dumpFile = async () => {
try {
await myBlogs.dumpFile();
console.log('>>> Generate successfully.');
} catch (error) {
console.log('>>> Faild to generate index', error);
}
};
dumpFile();
Use this lib as a DB in memoyr with load the generate file.
const GHBlogs = require('gh-blogs');
const blogRepo = 'https://github.com/ole3021/blogs';
const options = {
folder: './blogs', // path for the blogs folder
dbFile: './blogs.db' // path for the db file
};
const myBlogs = new GHBlogs(blogRepo, options);
const init = async () => {
await myBlogs.loadRemote(); // will load data from the repo remotely
const allBlogMetaInfo = myBlogs.getAll();
const aBlog = myBlogs.get('The _id in the meta info');
};
createdAt and updateAt in the meta infotitle, intro, cover, themeColor and etc.Zldfjz) in the meta info.FAQs
The lib to symulate manage blogs through Github repo with fildDB easily.
We found that gh-blogs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.